Human Risk Management · AVB Fort

Manage human cyber risk—not course completion

Train employees in the channels they already use, test their resilience with realistic multi-channel attack simulations, and turn observed behavior into a measurable risk view across your organization.

CyberBot Threat Simulations CyberFORT Score
Human Risk Overview
Last 90 days

CyberFORT Score

Organization index
Medium risk
74 / 100 ↑ 6
Needs attention Resilient

Departments

By resilience level
IT
86
Operations
77
Sales
68
Finance
61
↗

Risk signals

Updated now
✓

Scenario identified12 employees

!

Form submitted3 employees

→

Reinforcement assignedFinance

✓

Reported the attack

+18% this period

HRM cycle active

328 employees

Training and testing in real-world channels

↗Telegram MMAX ◇PWA Email ···SMS ◖Voice

A new category

Security Awareness ends where risk management begins

Completion rates show that an employee opened a course. They do not answer the question that matters most: what will that employee do during a real attack?

01
Classical Awareness

Tracks completion

  1. 01Assign a course
  2. 02Remind the employee
  3. 03Collect the completion rate
  4. 04Generate a report
Final outcome Training delivered
02
CyberFORT HRM

Manages risk reduction

  1. 01Define employee context
  2. 02Train with practical situations
  3. 03Test with a realistic scenario
  4. 04Observe actual behavior
  5. 05Reinforce weak areas and test again
Final outcome Risk measured and managed in a continuous cycle

Closed-loop HRM

From employee context to measurable reinforcement

Every new signal sharpens the risk picture and informs the next action.

01

Context

Understand the cost of a mistake

Role, department, authority, and access to critical assets.

02

Training

Build secure habits

Short practical scenarios in Telegram, MAX, and PWA.

03

Simulation

Test in real-world channels

Multi-step scenarios across multiple communication channels.

04

Measurement

Observe real actions

Decisions, reactions, engagement, and behavioral risk signals.

05

Reinforcement

Address the cause of risk

Targeted action and follow-up testing for priority groups.

Three layers. One system.

Training, testing, and measurement work together

Not a collection of disconnected tools, but one continuous risk cycle.

01CyberBot

Training comes to the employee

Practical training happens where employees already communicate and work: in Telegram, MAX, or PWA. No separate learning portal and no unnecessary friction.

  • Short interactive scenarios
  • Immediate explanation after every answer
  • Scores, progress, and achievements
  • Attempts, response speed, and engagement signals
CyberBot online

Scenario 7 of 10 340 points

Today, 10:24 AM
Situation

Your manager asks you to approve an urgent payment. The email came from an external address. What do you do?

✓
Secure choice

Urgency and an external sender should be verified before opening the document.

◎
New achievement Phishing Radar
+8
02Threat Simulations

Test behavior where real attacks happen

Build controlled scenarios that move across multiple channels and evolve in response to employee behavior.

  • Email, Telegram, MAX, SMS, and voice calls
  • Files, voice, messages, and landing pages
  • Behavior-based transitions between steps
  • Targeting by roles and HRM attributes
Demonstration scenario Urgent payment approval
Active
328 participants Finance + Operations 5 steps
↗
+ 5 min Telegram

Request follow-up

After open
◇
Event Landing page

Confirmation form

After click
◖
+ 10 min Voice call

Social pressure

If no response

Employee reported suspicious activity

Sequence stopped · risk contained
09:52
03CyberFORT Score

Turn scattered signals into actionable decisions

The index brings together training outcomes, simulation behavior, engagement, result integrity, and each employee’s business context.

  • From individual employee to the whole organization
  • Factors behind every result
  • Change after each intervention
  • Priority groups and the next best action
Organizational resilience 74/100
Change +6
Knowledge and decisions
Stable
Simulation behavior
Attention
Engagement
Stable
Result integrity
Normal
Access context
Critical
→
Next action Follow-up scenario for employees with payment authority

Multi-channel simulations

One attack rarely stays in one channel

An employee may receive an email, continue the conversation in a messenger, visit a landing page, and then take a phone call. CyberFORT tests the full sequence—not an isolated click.

AK
Demo profile Alex K.

Finance department

Elevated business context
@
09:42
Email Opened an urgent payment email

External sender · urgency signal

Opened
↗
09:46
Telegram Received a follow-up message

Scenario continued after the email was opened

Delivered
◇
09:48
Landing page Started filling in the form

No data submitted

Signal
✓
09:52
Response Reported suspicious activity

Scenario safely concluded

Identified
Scenario outcome Risk identified before data was submitted
Response time 10 min
Next step Short scenario
Opened a message Clicked a link Downloaded a file Started entering data Replied Reported the attack

Risk context

The same mistake can carry a different cost

The action matters—but so do the employee’s role, authority, and access to business-critical systems and data.

EM
Employee 01

Elena M.

Marketing specialist

Standard priority
Observed action Clicked a link in a simulated email
Payment systemsNo access
Administrative rightsNone
Working contextPublic materials
Recommended action Corrective training scenario
≠

The same action
does not mean the same risk

AK
Employee 02

Alex K.

Treasury specialist

High priority
Observed action Clicked a link in the same simulated email
Online bankingCritical access
Payment authorityApproval rights
Working contextConfidential documents
Recommended action Priority review and follow-up testing

HRM attributes help direct resources to the areas where a mistake could create the greatest business impact.

CyberFORT Score

One index—from an individual employee to the entire organization

Understand not only the current resilience level, but also what drives the result, how it changes, and what action to take next.

01

ExplainableSee the factors behind the number.

02

Context-awareAccount for the potential business cost of a mistake.

03

DynamicTrack change after training and follow-up testing.

CyberFORT Score Cyber resilience
Demo data
74 /100
Entire organization Moderate resilience

Change this period +6

Departments Index
IT
Information Technology42 employees
86
OP
Operations96 employees
77
FN
Finance37 employees
61
→
Priority group Employees with payment authority

Driver: repeated link clicks in urgent approval scenarios.

18

For every team

One view of risk. Different levels of control.

01

For CISOs

Back decisions with measurable evidence

A unified view of human risk, priorities, and change after every intervention.

Executive control
02

For security teams

Test hypotheses with realistic scenarios

Audience segmentation, multi-step simulations, and observed behavior.

Operational control
03

For HR and L&D

Train without unnecessary friction

Short formats in familiar channels and a clear view of engagement.

Learning and development
04

For leadership

See change—not activity volume

A clear organizational index without the need to interpret technical logs.

Strategic oversight

Getting started

Your first measurable risk view—in one structured cycle

From organizational structure to a baseline Score and targeted reinforcement plan.

01
+

Import your structure

Employees, departments, roles, and available communication channels.

02
⌁

Define business context

Authority, critical access, and HRM attributes.

03
▷

Establish a baseline

Initial training and a controlled simulation.

04
↗

Build the action plan

Baseline Score, priority groups, and the next cycle.

Baseline→ Reinforcement→ Follow-up testing→ Change↵

Product demonstration

See where human behavior creates real business risk

We will demonstrate CyberFORT HRM with scenarios relevant to your team and outline how to build your first measurable risk cycle.

  1. 01Clarify your goals and audience
  2. 02Prepare a relevant demonstration scenario
  3. 03Show training, simulation, and Score in one cycle
Request a demo

We will respond and arrange the most useful format.

Product demonstration and pilot discussion.