Academic studies have demonstrated and explained the ineffectiveness of security awareness and education (Bada, Sasse & Nurse, 2016) and CISOs are seeing it everyday, in practice. Human risk protection is the natural evolution of security awareness. Instead of simply telling the workforce how to behave, large, complex organisations must leverage technology to engage with and learn from their employees - at scale and in real time. The human intelligence thus generated can be used to build usable and more effective security. Security that takes into account the level of risk each employee poses to the organisation.Learning Outcomes:Learn from the past (reflecting on your experiences) to redesign the futureLearn how to bring common-sense, science and technology to the fluffy 'People' challenge Learn how to tangibly reduce the risk of data breaches caused by human behaviourBe introduced to the concept of human risk protectionAvoid death-by-Powerpoint - 2 min presentation (one slide), 13 min for Q&A