The role of human behaviour, decisions, and errors in security incidents and defence.
The human factor recognises that people are central to security—both as defenders and potential vulnerabilities. Most breaches involve human elements: clicking phishing links, using weak passwords, misconfiguring systems, or ignoring procedures. Addressing the human factor requires understanding psychology, designing usable security, and building culture where security is natural. Technical controls help but can't eliminate human factors.
Why It Matters
The DSC Perspective:
Technology alone won't solve security. People make decisions that determine outcomes. Design security that works with human nature rather than against it. Invest in awareness, culture, and usable security.