Deepfakes. AI-generated phishing. Credential exposure. Regulatory scrutiny.

As attackers increasingly exploit human behavior rather than technical gaps, the true attack surface has shifted—and traditional security awareness training alone can no longer keep up. Participants joined KnowBe4 Security Awareness Advocate Erich Kron for an invitation-only virtual roundtable and guided whiskey tasting focused on Human Risk Management (HRM), a modern, data-driven approach to identifying, measuring, and reducing cyber risk rooted in human behavior. Drawing on real-world threat data and practical frameworks, this interactive discussion explored how leading organizations are moving beyond one-time training toward continuous, AI-powered risk reduction that adapts to how people actually work and make decisions.

During the session, participants discussed:

• Why human behavior now accounts for the majority of security incidents and why awareness alone doesn’t change outcomes
• How AI is reshaping both social engineering attacks and defensive strategies through behavioral analytics and adaptive controls
• What effective Human Risk Management looks like in practice: from risk assessment and personalized learning to real-time coaching and continuous monitoring
• How security leaders can demonstrate measurable risk reduction, improve security culture, and align HRM initiatives with broader business and regulatory priorities

This was a candid, peer-level conversation designed for security leaders who want to move from reactive training programs to proactive, measurable human risk reduction—all while enjoying a guided whiskey tasting delivered to their doors.