Understand
When controls are designed away from real work, risk gets missed. This step identifies how people, processes, systems, and business pressures shape risk.
About CybHrSec
Cybersecurity that starts with people and supports real business decisions.
CybHrSec exists to make cybersecurity, digital safety, privacy, governance, risk, and compliance easier to understand and easier to act on.
Founder perspective
Founded by Valerie Adjei to make cybersecurity practical, human, and sustainable.
CybHrSec was founded by Valerie Adjei, a governance, risk, compliance, and cybersecurity professional with over 10 years of experience spanning behavioral science, human resources, governance, risk management, compliance, and cybersecurity.
Working across financial services, healthcare, nonprofit, and professional services, Valerie observed that many security and compliance challenges are not caused by a lack of technology, but by gaps between people, processes, and expectations. Effective cybersecurity depends not only on controls and frameworks but also on communication, behavior, accountability, and support for people in making informed decisions.
This insight led to the development of the Human-Centered Cybersecurity and Compliance (HCC-GRC) approach, which focuses on making cybersecurity and compliance practical, understandable, and sustainable for all.
Today, CybHrSec supports both businesses and individuals, helping them navigate cybersecurity, compliance, privacy, and digital safety challenges. Whether you're protecting an organization, a brand, a career, or your personal digital life, CybHrSec helps you build resilience in an increasingly connected world.
Credentials: MSIT Cybersecurity, MS Human Resource Development & Consultancy, CompTIA Security+, ISO 27001:2022 Lead Implementer, Chartered Institute of Personnel Development (CIPD L7)
Human-centred framework
A practical method for making security stick.
The HCC-GRC framework translates recognized frameworks such as NIST CSF and ISO 27001 into practical actions people can understand, adopt, and sustain, with specific attention to the human risk layer behind compliance and security failures.
Assess
Gaps grow when controls and workflows are reviewed in isolation. This step evaluates cybersecurity, compliance, and human-driven risk together.
Simplify
Requirements fail when they are too technical or unclear. This step turns policies, controls, and compliance expectations into actions teams can follow.
Embed
Security breaks down when expectations sit outside daily work. This step integrates governance, security expectations, and accountability into operations.
Improve
Risk returns when adoption and remediation are not monitored. This step tracks control effectiveness, ownership, and recurring human-risk patterns.
Industry Contributions
Published Contributor
Infosecurity Magazine
Article forthcoming
Cybersecurity thought leadership on emerging governance, risk, compliance, and human-centered security challenges.