Cyber Readiness · Human Risk Exposure

Cyber awareness with measurable prevention evidence.

Paragamix connects realistic cyber drills with anonymous, aggregated analysis. Organisations see what was trained, where action is needed and which prevention measure should come next.

TrainMeasureImproveDocument

More than a participation record.

Traditional awareness platforms mainly show who completed training. Paragamix anonymously evaluates how security-relevant decisions are made in realistic situations and aggregates the results.

Train

Employees make decisions in realistic cyber situations.

Measure

Validated decisions are evaluated anonymously and in aggregate.

Improve

Priority areas and useful refresh measures become visible.

Document

Results are documented as traceable Cyber Prevention Evidence.

For employees

Short missions instead of slide training.

Realistic cyber situations, clear decisions and direct feedback.

For organisations

Management evidence beyond completion rates.

Aggregated Cyber Readiness analysis, recommended actions and evidence for management, ISMS and audits.

Measurable prevention

Human Risk Exposure, not just a completion rate.

Human Risk Exposure (HRE) is the weighted proportion of risky decisions within validated cyber drills. The lower the value, the safer the observed decisions were.

Methodological limit: HRE is not an incident or loss probability and is not an actuarial risk assessment.

Human Risk Exposure8.4%

91.6% of evaluated security-relevant decisions were made safely.

From drill to a concrete prevention measure.

The company portal brings together an organisation’s own Cyber Readiness. The partner view supports multiple customers and prevention runs.

Company portal · /portal

Your own Cyber Readiness at a glance.

Human Risk Exposure, coverage, areas for action, next measures, development and evidence come together in one company view.

Open portal
Paragamix company portal showing Human Risk Exposure, coverage, areas for action, measures, development and evidence
Partner view · /partner

Manage customers, runs and measures centrally.

IT service providers, consultancies and cybersecurity partners view prevention runs, risk patterns, recommendations and evidence across their customers.

Open partner view
Paragamix partner view showing customer management, prevention runs, Human Risk Exposure, risk development and recommended measures

Cyber Prevention Evidence for audit, management and insurance.

Paragamix documents not only that an awareness measure took place, but also its content, reach and measured results.

ISO 27001 · ISMS

Support audit evidence.

Show how information security awareness is conducted, evaluated and developed systematically.

  • Completed mission and period
  • Coverage and trained decisions
  • HRE, priority areas and refresh measure

Customers · Suppliers

Document measures concisely.

For customer audits and supplier evidence, show which measures ran, participation levels and the security topics trained.

  • Cyber Basics and AI Awareness
  • Business Continuity and Incident Response
  • Cyber Resilience Act (CRA)

Cyber insurance

Document recurring prevention.

Aggregated results can be used as supplementary prevention evidence for insurers or risk-engineering functions.

  • Repeated cyber drills
  • Measured priority areas
  • Derived refresh measures

The evidence supports internal documentation and audit evidence. It does not replace certification, an audit opinion, a conformity assessment or a statement about insurance cover.

Cyber Prevention EvidenceThe New Customer
Coverage92%
Human Risk Exposure8.4%
Highest Human Risk DriverCredential Handling
Relevant Cyber EventAccount Compromise
Next measureRefresh drill in 90 days
Evidence qualityHigh
Aggregated results · No personal participant profiles

Traceably documented

From participation to prevention evidence.

The report connects mission, coverage, observed decisions, priority areas and next action in one concise evidence structure. It shows what was trained, measured and developed further.

  • Evidence for management and ISMS
  • Context for internal and external audits
  • Supplementary prevention evidence for cyber insurance

From human behaviour to possible loss paths.

The professional mapping makes connections understandable without deriving a loss probability from observed behaviour.

Risky decisionCredentials are disclosed
Human Risk DriverCredential Handling
Cyber EventAccount Compromise
Possible loss pathBusiness interruption or recovery costs

This mapping describes possible loss paths. It is not a loss probability or a statement about specific insurance cover.

Data-minimised participation

Evidence without employee surveillance.

Paragamix uses participation codes without clear names and aggregated results. Names, email addresses and personal employee profiles are not required for participation or evaluation.

  • No employee rankings
  • No individual HRE profiles
  • No participant-code mapping to a natural person at Paragamix

Order, administration and technically required log data are handled separately under the privacy notice.

Train. Measure. Improve. Document.

Turn cyber awareness into a continuous prevention process.