ABSTRACT

When we think about cybersecurity, it’s easy to focus on the technology. We think about computers and networks. We think about software and vulnerabilities. What we don’t always remember is that it’s just as—if not more important—to consider the people involved. The people are the ones who make decisions about how to build the systems, how to operate those systems, what constitutes safe behavior, and how to respond to potentially risky situations or attacks. The best technological solutions in the world won’t protect a company if the people involved aren’t making smart and cybersecurity aware decisions.