Summary
The core message of the session is that organizations should stop treating employees primarily as cybersecurity’s “weakest link” and instead bring them into the shared mission of cyber resilience. After introducing Verena’s earlier argument that humans do not need to be framed as the problem, the moderator welcomed Remco Spithoven of Saxion University of Applied Sciences and the Dutch Cyber Resilience Expertise Network, alongside Ruud Kessels of Rabobank. Remco opened by connecting the “human as a solution” approach to cyber resilience, arguing that the mindset shift is not just about nicer language but about preparing organizations for a threat landscape in which they will likely be hit and will need people’s help to keep functioning and recover.
Key Topics
5 key topics from Verena Zimmermann, Remco Spithoven and Ruud Kessels at ONE Conference. Thicker branches were mentioned more often in the talk.
Key Takeaways
- Replace weakest-link framing with shared-mission language.
- Include employees in cyber incident and recovery planning.
- Study what goes right, not only what fails.
- Value social ties across teams, partners, and suppliers.
- Treat cyber resilience as an added layer beyond security.
“the entire organization from CEO to the janitor to everyone at the reception desk is part of the bigger mission”
Up Next
Next in agenda
Examples of collaboration within the Cyber Resilience Network: the SME Cyber Emergency Line and Setting up an ISAC on Curacao
Also on security culture
Keynote: Can Humans Be the Solution? From Shifting Mindsets to Shifting Gears in Cybersecurity Practice
Verena Zimmermann
Also on cyber resilience