Through Your Mind’s Eye: What Biases Are Impacting Your Security Posture?
summary
Claims that cognitive biases systematically skew security decisions: high-profile stories (SolarWinds) drive risk assessments while common threats (ransomware, PII leaks, unpatched systems, mobile gaps) get neglected; teams default to blaming users (PEBKAC) or sticking with on‑prem sunk costs instead of refactoring for cloud. Practical fixes: require cross‑team evidence summaries for boards, schedule third-party pen testing, add user behavior analytics or XDR, and enforce 3/6‑month posture reviews to catch misprioritized risks.
AI-written summary · about
chapters (9)
- 0:00Intro
- 1:31Cognitive Biases Shape Our Beliefs
- 3:06Availability Bias
- 8:30Confirmation Bias
- 12:01Unconscious/Implicit Bias
- 18:18Safety Bias
- 23:15Other Biases That Could Arise...
- 29:00Tips on Removing Biases
- 31:49Applying What You Have Learned
related talks
53mOptimistic Security
31mThe psychology of security: Why we make mistakes
39mHow Cognitive Biases Affect our Software Architectures
01h 00mCognitive biases in software development
48mLevel Up Your Security Mindset
48mHow to build a security mindset
40mOptimistic Security
15mTelling Hard Truths to Impact Change in Cybersecurity