A global healthcare leader aimed to scale a human risk management program across 120,000 employees despite having only 1.5 full-time staff dedicated to security awareness. Focusing first on social engineering threats, the team used role data, threat intelligence, and behavioral patterns to identify high‑risk groups, with contractors standing out due to consistently low vigilance. Instead of broad, generic training, the organization pursued targeted interventions designed to deliver the right message to the right individual at the right time, emphasizing real risk reduction over checkbox compliance.

Join for free to read