Contextual risk thinking for governance, assurance, and better decisions.
RiskSME is the professional identity and platform of Nijel Redrick, focused on contextual risk, governance-ready decision-making, assurance, institutional accountability, and the advancement of The Human Assurance Framework™ (HAF).
About Nijel Redrick
Nijel Redrick is a cybersecurity GRC leader and framework developer focused on governance-ready decision-making, assurance, and institutional accountability.
Nijel Redrick leads cybersecurity GRC strategy for organizations and is known for advancing structured approaches to understanding risk, trust, and assurance in complex environments. His work emphasizes the importance of governance-ready reasoning by helping institutions translate technical exposure, compliance obligations, and human factors into decisions that leadership can defend and sustain over time.
He is the developer of The Human Assurance Framework™ (HAF) and related models for resilience and trust. HAF is a human-centric model designed to integrate governance, risk, privacy, compliance, and assurance into a more coherent structure for decision-makers. The framework reflects the view that effective assurance depends not only on controls and policies, but also on how people interpret obligations, communicate risk, and act under real-world constraints.
Through RiskSME, Nijel shares research, frameworks, and professional perspectives on contextual risk, governance clarity, and institutional resilience. His work explores how organizations can strengthen trust, defensibility, and accountability while navigating complex technical and regulatory environments.
Nijel holds a Bachelor’s degree in Mathematics from Howard University with a minor in computer science. He also holds the CCSP, CISA, CISSP, and PMP professional certifications.
His professional activities include writing, framework development, research and conceptual modeling, professional dialogue, and speaking on topics related to cybersecurity governance, risk-informed decision-making, and institutional assurance.
Nijel accepts selective, non-conflicting opportunities that align with his focus on cybersecurity governance, risk-informed decision-making, and the development of evidence-based frameworks.
The Human Assurance Framework™
The Human Assurance Framework™ (HAF), developed by Nijel Redrick, is a human-centric model for integrating governance, risk, privacy, compliance, and assurance into a more coherent and decision-useful structure.
-
HAFA human-centric model HAF recognizes that effective assurance depends not only on controls and obligations, but also on people, trust, interpretation, communication, and decision quality.
-
PurposeIntegration across disciplines The framework helps connect governance, risk, privacy, compliance, and assurance activities that are often treated as separate when they should inform one another.
-
ValueGovernance-ready understanding HAF supports more coherent prioritization, more defensible reasoning, and more useful communication to decision-makers.
Framework Origin Statement
This section records authorship and public association of the framework with its developer.
The Human Assurance Framework™ is an original framework developed by Nijel Redrick to provide a more coherent, human-centered model for integrating governance, risk, privacy, compliance, and assurance. RiskSME serves as the professional home for the framework’s public introduction, explanation, and continued positioning.
Why this matters
Clear public attribution strengthens the framework’s authorship record and reinforces its association with the name, platform, and source from which it originated.
How it should be referenced
Preferred reference: The Human Assurance Framework™ (HAF), developed by Nijel Redrick.
Focus Areas
RiskSME focuses on the ideas and practices that help leaders and institutions make better decisions under constraint, complexity, and scrutiny.
Governance-ready decision-making
Clarifying how technical, organizational, and regulatory realities should be translated into decisions that leadership can approve, explain, and sustain.
Assurance and defensibility
Strengthening the reasoning, evidence posture, and institutional clarity needed to support scrutiny, accountability, and durable confidence.
Human-centric risk integration
Connecting human, technical, and organizational resilience so that risk is understood in the context in which real decisions are actually made.
-
IncludesWriting, frameworks, and professional commentary Public-facing material may include original models, structured ideas, explanatory content, and selected professional perspectives related to cybersecurity governance and compliance.
-
ThemesTrust and institutional accountability Core themes include governance-ready decision-making, assurance and defensibility, trust and institutional accountability, human-centric risk integration, and cybersecurity governance and compliance across frameworks such as NIST, ISO, CMMC, HIPAA, and SOC 2.
Human Assurance Framework™ Intellectual Property Notice
The Human Assurance Framework™ represents original framework material developed and published by Nijel Redrick.
-
OwnershipThe Human Assurance Framework™ The Human Assurance Framework™, including its name, conceptual structure, terminology, explanatory models, and associated materials presented on this website, constitutes original intellectual property developed by Nijel Redrick.
-
TrademarkCommon-law trademark rights “The Human Assurance Framework™” and “HAF” are used as source-identifying marks associated with the framework created by Nijel Redrick. All common-law trademark rights are reserved.
-
AttributionProper reference Reference to the framework in commentary, research, or discussion must properly attribute the framework to Nijel Redrick and must not imply ownership, endorsement, sponsorship, or affiliation where none exists.
-
RestrictionsNo unauthorized reproduction The framework’s original wording, structure, explanatory models, and branded materials may not be reproduced, repackaged, taught as proprietary, or commercially exploited without prior written permission from Nijel Redrick.
For legitimate framework-related inquiries, contact framework@risksme.com.
Contact
For framework-related inquiries, speaking discussions, professional dialogue, or other appropriate inquiries, send a short note by email.
framework@risksme.com
Preferred for initial outreach
Appropriate inquiries
1) The Human Assurance Framework™
2) Speaking or thought leadership discussions
3) Professional dialogue aligned with existing obligations
Important note
External opportunities, if any, are considered selectively and only where they do not conflict with existing professional responsibilities.
Disclaimer: RiskSME is a professional identity and platform for ideas, frameworks, and structured perspective. Nothing on this website should be interpreted as a general offer to provide unrestricted competing work.