Frequently asked questions

HumanSecIQ is a cybersecurity consultancy focused on the human side of security risk. We assess how employee behavior, organizational practices, security culture, and AI usage influence an organization's cybersecurity exposure, and we translate what we find into findings and recommendations leadership can act on.We work with professional services organizations across Tampa Bay, Southwest Florida, and the surrounding region.

Most cybersecurity work measures technology. Firewalls, patching, endpoints and access controls can all be inventoried, and most organizations have a reasonable picture of them.HumanSecIQ measures the part that inventories do not reach: how people actually make decisions when a request looks urgent, whether employees feel able to report a mistake, and how AI tools are being used day to day. The Verizon Data Breach Investigations Report found the human element present in 62% of breaches in 2026, up from 60% the year before, after a decade of investment in awareness training.HumanSecIQ is also led by a former educator, which shapes how findings are explained and how training is designed. Understanding what people are doing is one problem. Changing it is a teaching problem.

Professional services organizations that handle sensitive information and depend on client trust. In practice that means law firms, CPA and accounting firms, private schools, nonprofits, and professional and trade associations.Engagements have covered organizations from roughly ten employees to several hundred. The methodology scales; what changes is scope.

No. Most of the organizations we work with have no internal security staff, and many rely on an outside IT provider.Findings and recommendations are written for the person who has to decide what to do next, not for a security team. Each recommendation names a suggested owner, and where a technical step is involved it is described in terms your IT provider can act on directly.

No. HumanSecIQ does not perform penetration testing, vulnerability scanning, or other technical security testing.We assess the human and organizational conditions that technical testing does not measure. The two are complementary, and organizations often run both. If technical testing is what you need, we will say so plainly rather than scoping work that will not answer your question.

Our methodology is informed by the NIST Cybersecurity Framework 2.0, NIST SP 800-50r1 for awareness and training program evaluation, and the SANS Security Awareness & Culture Maturity Model, alongside current breach research including the Verizon Data Breach Investigations Report.Findings map to frameworks your clients, insurers and auditors already recognize. HumanSecIQ assessments are advisory and do not constitute certification or audit against any framework.

HumanSecIQ is based in Florida and serves the Tampa Bay and Southwest Florida regions, including Fort Myers, Bonita Springs, Naples, and the surrounding areas.Assessments are conducted through a combination of remote and on-site work depending on scope, so organizations outside those areas can be served as well.

Two ways, depending on how much you already know about what you need.If you want a sense of where your organization stands before talking to anyone, the Free Human Risk Check takes about five minutes and produces a written report by email.If you are ready to discuss an engagement, request a proposal or book a discovery call. Either one starts a conversation about scope, and you receive a fixed-price proposal before any work begins.