Personal-to-work lateral risk
Compromised personal email, reused passwords, and stolen sessions are the most common starting points for incidents that end up inside the corporate perimeter.
For business
🏢 Employers
Protect your people beyond 9-to-5.
Most breaches start with a personal account. Extend security to where your team actually lives online, and turn security awareness into something employees opt into rather than tune out.
Where the gaps are
What costs your business, first.
These are the three patterns that drive most of the personal-cyber risk for employers. The plan addresses whichever one matters most for your population.
Annual SAT plateau
Mandatory yearly modules teach knowledge but rarely change behaviour. The drop-off after week one is steep and well-documented.
Employee assistance gap
Your EAP covers mental health and finances. It does not help an employee whose elderly parent just sent $20,000 to a scammer impersonating them.
The case
Why this is worth doing.
The points below are sourced where a public source exists. Where a number is an internal model or industry observation rather than a measured fact, we say so.
-
68% of breaches involve a non-malicious human element, not a technical hack.
Verizon Data Breach Investigations Report, 2024
-
$4.88M is the average cost of a data breach globally; the human-error subset trends higher.
IBM Cost of a Data Breach Report, 2024
-
A single prevented incident pays for personal-cyber benefit programmes many times over, before counting morale and retention effects.
-
Personal-side hygiene compounds existing controls (MFA, EDR, DLP) rather than duplicating them.
Frameworks and obligations
Aligned with what you already have to do.
We do not claim certifications we do not hold. The list below is where Demysti5 either fits an existing obligation, supports a control, or stays out of regulated data flows by design.
SOC 2
Supports user-awareness controls under CC1.4 and CC2.2.
ISO 27001 / 27002
Direct fit with §7.2.2 information security awareness.
NIST CSF 2.0
Maps to PR.AT (Awareness and Training) function.
NIS2
Aligns with management awareness obligations under Article 20 (EU).
Your plan starts with one 60-second check.
Same product, shaped to how you live online. No email, no card, no download.