personnel behavior risk scoring

Giving each employee a risk value based on observed security behavior, such as simulation clicks, reported phish and finished training.

Where the book teaches it