Mid-market IT service provider blueAPACHE has launched a Human Risk Management-as-a-service powered by AI security platform provider, Mimecast.
The per-user monthly model brings together awareness training, policy visibility, behavioural controls. As well as incident remediation into a repeatable outcome-based service for mid-market organisations.
It will sit alongside blueAPACHE’s managed services and managed detection and response bundles.
The service reflects a broader shift where human risk has been amplified by AI and fragmented security approaches. It has become one of the dominant, yet least managed, threat surface, forcing providers to package it as a unified, outcome-driven service.
This is designed for organisations with between 50 and 1,500 seats that are managing the competing pressures of regulatory compliance, security framework alignment, and the rapid adoption of AI and cloud-based tools.
Human Risk Management as a Service consolidates that into a clear, per-user monthly model that
“In the mid-market, customers are buying an outcome, not a product,” said blueAPACHE CEO Michael Zuppa.
“What they need is a managed service that takes responsibility for awareness, cultural uplift, visibility, and remediation as a continuous, consistent capability.
“We have been delivering parts of this for years across our vCISO, email security, and awareness training services, but the structure was not clear enough for customers to engage with it as a whole. Human Risk Management-as-a-service changes that.”
The rapid adoption of AI tools has compounded this exposure, with individuals already using public AI services while data classification and DLP policies are still being developed.
For mid-market organisations, the gap between current maturity and adequate protection is a live and immediate risk.
That is one of the reasons blueAPACHE selected the Mimecast platform to underpin the service following a structured assessment of MSP-aligned security platforms.
“Human risk has always been the hardest part of the security equation to operationalise at scale,” said Mimecast A/NZ partner leader Lizelle Hughes. “blueAPACHE has developed something that will make meaningful change for Australian organisations.
“The reality is that 8 per cent of employees generate 80 per cent of risk, and AI agents now operate with the same access and none of the judgment that a human brings.”
As organisations progress through data classification and AI governance maturity programs, blueAPACHE’s Human Risk Management capability will also provide visibility.
“Time is the risk…organisations are already on an AI journey whether they are ready or not,” Zuppa said. “We need to ensure the visibility and controls we have in place are protecting the customer while they are still working through their maturity. That is what this service is designed to do.”
The partnership also reflects blueAPACHE’s broader relationship with Mimecast as both a managed service delivery partner. As well as a resell and implementation partner across its enterprise customer base.