HCM stands for human capital management software. It is the system an organization uses to manage employee records, payroll-related data, onboarding, time tracking, benefits, job history, and other HR workflows. Because HCM stores authoritative workforce information, it is often a source of record for identity, access, and reporting decisions.
In cyber security, HCM matters because it frequently connects to other business systems such as CRM, finance, and analytics platforms. If an attacker gains access to HCM, they may be able to expose sensitive personal data, alter employee details, create fraudulent users, or trigger downstream access changes. Defenders should protect HCM with least privilege, strong authentication, audit logging, and approval controls for high-impact changes. In AI-assisted enterprise tools, HCM is especially sensitive because a conversational layer may query or write to HR data, increasing the risk of data leakage, prompt injection, and unauthorized record updates.