Skip to content

Human Factor

What is Human Factor?

The element of cybersecurity risk related to human behavior, decision-making, and susceptibility to social engineering attacks.

Information Security

What the standards actually require on human factor

Requirements naming human factor across 6 standards, quoted from the control text.

The ways that people and their performance can affect railway RAMS, positively and negatively, are recognised and handled across the whole life cycle, covering not only the in-service phase of operating, maintaining and monitoring performance, but every phase...

en-50126-en-50128-en-50129-railway-applications-rams::50126-1:5.6.4 · Human factors →

Recommendation: the State ensures that Human Factors principles are considered when new security equipment is developed.

icao-annex-17-aviation-security-avsec::2.5.2 · 2.5.2 Human Factors in new equipment →

Address human factors during engineering, including usability of security controls, error tolerance, and operator workload, to reduce the likelihood of human-induced compromise.

SE-HF · Human Factors in Secure Systems Engineering →

Implement the security design principle of human factored security in [Assignment: organization-defined systems or system components].

NIST800-SA-8(27) · SA-8(27) Security and Privacy Engineering Principles | Human Factored Security →

FOOs and FOAs receive recurrent training in the Table 3.5 competencies, FOOs receive human factors training at the Authority's frequency and at least every three years, and personnel with dangerous goods duties complete dangerous goods training (DSP 2.2.2 to 2...

iata-operational-safety-audit-iosa-standards-manual::DSP 2.2 · DSP 2.2 Training Elements →

Personnel involved in developing, validating, operating, supporting and using computerized systems are suitably educated, trained and experienced for their roles, training needs are identified for each role and for new or changed systems and processes, trainin...

gamp-5-good-automated-manufacturing-practice::6.1.3 · 6.1.3 Training →

Questions people ask about human factor

What is Human Factor?
The element of cybersecurity risk related to human behavior, decision-making, and susceptibility to social engineering attacks.
Why is Human Factor important for compliance?
Human Factor is a key concept in Information Security. Understanding human factor helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Human Factor?
Human Factor appears in the requirement text of EN 50126 / EN 50128 / EN 50129 - Railway Applications RAMS, ICAO Annex 17 - Aviation Security (AVSEC), NIST SP 800-160, NIST SP 800-53 Rev 5, IATA Operational Safety Audit (IOSA) Standards Manual. Across these standards we have identified 12 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Human Factor?
Explore our compliance framework pages to see how human factor applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Human Factor applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.