Living Security launches HRM Framework 2.0 to help teams preempt workforce cyber risk. Open framework organizes human and AI agent risk around 10 breach scenarios as Living Security incorporates the approach into its platform AUSTIN, Texas, October 29, 2026 (Newswire.com) - Living Security, the AI-native Human Risk Management (HRM) company, today announced HRM Framework 2.0, an open resource that helps security teams connect workforce risk signals, recognize patterns of emerging exposure and take action to preempt cyber incidents. Published at humanriskmanagement.com, the framework organizes human and AI agent risk around 10 breach scenarios and provides a structure for identifying exposure, choosing interventions and measuring progress. Security teams collect information about workforce behavior, access and threats across multiple tools. Understanding what those signals mean together, and deciding what to do next, remains a challenge. HRM Framework 2.0 gives teams a common structure for interpreting those signals in the context of the incidents they are trying to prevent. "Security teams need to start with a practical question: what incident are we trying to prevent?" said Ashley Rose, CEO and Co-Founder of Living Security. "That question helps teams decide which signals matter, who needs attention and what response fits the risk. We built HRM Framework 2.0 to give practitioners a shared structure for making those decisions and measuring whether their actions reduced exposure." Connecting Risk Signals to Preemptive Action The framework connects signals across risk domains to cohorts of people or agents with shared exposure, and to sequences of activity that help teams predict where risk may lead. By examining how signals develop together over time, teams can recognize emerging patterns and act to preempt an incident. For example, a phishing message, a link click and an unusual login can each warrant attention. Examined as a sequence, they may indicate a developing account takeover and help teams intervene before the attacker gains further access or causes harm. The framework also maps interventions to the underlying risk. Risky behavior may call for targeted coaching or training, while exposure tied to permissions or access may require a change to security controls. A self-assessment helps security teams evaluate their progress toward a preemptive Human Risk Management program. Using the framework's maturity model, teams can assess their ability to identify emerging risk, anticipate potential incidents and take targeted action, then prioritize the improvements needed to advance. Bringing the Framework Into the Living Security Platform Living Security is incorporating the framework into the Living Security Platform, with development focused on organizing risk intelligence and response around breach scenarios. That work maps the framework's breach scenarios to platform signals, cohorts and playbooks. The goal is to help security teams move from identifying a scenario to understanding who is exposed, selecting an appropriate intervention and tracking how risk changes afterward. As AI agents gain access to business systems and sensitive data, the approach also brings agent activity and human accountability into the same view of workforce risk. "The framework gives teams a way to connect the risk they see to the action they take," said Chris Poirel, Head of Data Science at Living Security. "We're building that approach into the platform so practitioners can use the same structure to understand exposure, guide their response and measure how risk changes afterward." An Open Resource for Human Risk Management HRM Framework 2.0 is published under a Creative Commons Attribution 4.0 license and is available for security teams, vendors and researchers to use with attribution. The framework maps to the NIST Cybersecurity Framework and MITRE ATT&CK, helping practitioners connect workforce risk management to established security practices. Explore HRM Framework 2.0 and take the self-assessment to evaluate your progress toward a preemptive HRM program at humanriskmanagement.com. About Living Security Living Security is the global leader in Human Risk Management (HRM), helping organizations identify, measure and reduce workforce cyber risk across people and AI agents. Its AI-native Human Risk Management platform combines behavioral, identity and threat intelligence to predict risk, guide response and prevent cyber incidents before they occur. By connecting security data to measurable business outcomes, Living Security enables organizations to continuously reduce workforce risk while strengthening organizational resilience.

Living Security announces Security, Sold podcast hosted by CEO Ashley Rose. Candid conversations with CISOs on the leadership challenges behind security decisions, from the boardroom to the budget. AUSTIN, Texas, October 27, 2026 (Newswire.com) - Living Security, the AI-native Human Risk Management (HRM) company, today announced Security, Sold, a cybersecurity leadership podcast hosted by Ashley Rose, CEO and Co-Founder of Living Security. The series explores how security leaders earn executive trust, make the case for investment and build support for action across the business. Security leaders can spot a problem and recommend a fix, but moving the organization requires support from people with different priorities. Security, Sold looks at how CISOs and senior security executives build that support. Guests talk through the decisions they made, what those decisions taught them and how they learned to turn risk into a story the business understands. The show grows out of Living Security's work in human risk management. Founded in 2017, the company helps security teams identify where risk is building across humans and AI agents, act on it and show leadership that risk is going down. That last step is where many programs stall. Manish Khera, CISO and SVP, Business Security Officer, described the job on the show's first episode: "As a CISO, I'm an SME around cybersecurity. So I provide risk information so the business can make informed decisions. And that decision we made together is a decision we stick to together, right?" Security, Sold is about that moment: turning a measured risk into a decision the business backs. "Human Risk Management can give a security leader a number worth defending: where risk is building, what is driving it and whether it is going down," said Rose. "Defending it is its own skill, and nobody hands it to you with the dashboard. Every CISO is now a salesperson. I wanted a place where leaders could talk honestly about that work: the budget conversation that stalled, the relationship that changed a decision and what they'd do differently today. Those stories are how other leaders make progress inside their own organizations." A podcast for CISOs on the business side of security Each episode works through one leadership challenge from a guest's own experience. Topics include communicating with boards and executives, working through competing priorities, building investment cases and bringing security into business decisions earlier. Across human risk, AI adoption, identity and resilience, the question stays the same: how do leaders turn an understanding of risk into action? Guests share what worked and what didn't. Episodes now available include: * "How I Stopped Being 'The Security Person'" with Manish Khera, CISO and SVP, Business Security Officer. Khera explains why security teams default to "no" and how to replace it with shared, informed risk decisions the business stands behind. He also covers how relationships shape outcomes before and during a crisis. * "Identity Already Sees Access. I Needed It to See Behavior" with Leda Muller, Chief Information Security and Privacy Officer, Stanford Residential & Dining Enterprises. Muller explores what risky behavior looks like beyond malicious data movement, including AI use that doesn't match someone's role, and why behavior is often the clearest signal as AI spreads across the workforce. Identity shows what a person can reach. Behavior shows what they are doing with it. Upcoming conversations include Daniel Bowden, Marsh Global Business CISO, on "The Room You Have to Win Before the Board Ever Sees It." Listen and subscribe New episodes are released every other Tuesday on Spotify, Apple Podcasts and YouTube. Explore Security, Sold, listen to available episodes, watch the trailer and apply to be a guest at livingsecurity.com/podcast-security-sold. About Living Security Living Security is the global leader in Human Risk Management (HRM), helping organizations identify, measure and reduce human cyber risk across humans and AI agents. Its AI-native Human Risk Management platform combines behavioral, identity and threat intelligence to predict risk, guide response and prevent cyber incidents before they occur. By connecting security data to measurable business outcomes, Living Security enables organizations to continuously reduce workforce risk while strengthening organizational resilience.

Living Security has introduced "Start With the Why", a framework for human risk management that helps organisations build security programmes around preventing specific cyber incidents rather than measuring security awareness activities. The Austin-based company's approach encourages security leaders to identify which breach they refuse to accept, then align behavioural signals, identity intelligence, and security controls accordingly. The framework is built on research with the Cyentia Institute showing that approximately 10% of users account for 73% of measurable human risk. CEO Ashley Rose will present the framework at the Cognitive Security Conference. The company has released a free command kit to help organisations implement the approach.