A Human Risk Management Discussion: Skill Sets and Tools to Achieve Cyber Fitness
Dr Jenny Tan24 Nov 2025 · 1 min read · First published by SheLeadsTech Singapore
'Cyber fitness' is Jenny's term for an organisation's sustained ability to anticipate, resist and recover from cyber incidents — and, like physical fitness, it is the product of habits practised daily rather than a single awareness campaign.
The article sets out the skill sets that matter most: security-minded decision-making at every level, the ability to translate technical risk into business language, psychological safety so that near-misses are reported, and leadership that models the behaviour it expects. It then reviews the tools that reinforce those skills, from simulations and phishing exercises to behavioural analytics and risk dashboards that tell leaders something they can act on.
Jenny's thread throughout is that tools amplify culture; they cannot replace it. Organisations that invest in people first get far more from the technology they buy.
Key takeaways
- Cyber fitness is a habit system, not a campaign.
- Business-language fluency and psychological safety are core security skills.
- Tools amplify culture — invest in people first.
Enjoyed this article?
Subscribe for new articles, or invite Jenny to speak on this topic at your next event.
Comments