In the evolving landscape of cybersecurity, many organizations rush to build security awareness programs, but is this the right approach? In this groundbreaking talk, we’ll challenge conventional wisdom and explore why security awareness shouldn't be your starting point. Instead, we’ll dive into how identifying and understanding your organization's specific risk scenarios must come first.

Using a powerful model for human risk management, I’ll guide you through the steps to cultivate a robust security culture that directly addresses and mitigates your organization’s most critical risks. We’ll also unpack the essential requirements of security culture and awareness as outlined in the new NIS-2 directive, providing clear, actionable insights on how to meet compliance and fortify your organization from within.

Join me to discover why the foundation of an effective security culture lies in targeted, risk-driven strategies, and learn how to craft a security culture that not only meets regulatory standards but truly protects your organization where it matters most.

Imagine confronting a risk you can’t see, touch, or even fully understand—a threat so abstract that it eludes the grasp of our instincts. This is the challenge we face with AI and digitalization. Our brains, wired to respond to tangible dangers, struggle to process these intangible risks, often triggering discomfort and irrational fear.

The unfamiliarity of AI stirs a deep unease within us, rooted in our evolutionary past, where the unknown was synonymous with danger. We naturally compare AI only to ourselves, which can amplify our anxiety and cloud our judgment, leading to flawed risk assessments.

As we venture into a future shaped by these technologies, we must confront this psychological barrier. But how can we navigate this landscape? In this talk, I’ll explore a practical, human-centered approach that transcends technical jargon. We’ll delve into the evolution of our subconscious mind and uncover how we can harness cognitive biases—those same instincts that make us wary—to our advantage. Prepare to rethink risk in the age of AI

In the realm of cybersecurity, the greatest challenge often lies not in technology, but in human behavior.
This talk unveils the art and science of "security nudging"—subtly guiding users toward safer actions without them even realizing it.

By tapping into the workings of the subconscious mind, we can influence behavior in ways that are both effective and enduring.

We’ll explore how our brains are wired, uncovering the biases that shape our decisions and often lead us astray. Understanding these cognitive patterns is essential for anyone involved in cybersecurity.

Join me as we delve into the psychology behind secure behavior and learn how to design nudges that effortlessly lead your users down the path of security.

This is more than just theory—it's a practical guide to making your cybersecurity efforts resonate with the very people they aim to protect.

You're hot, and you're cold....

In moments of crisis, our minds often swing between extremes, caught in the grip of emotions and instincts that can cloud our judgment. This talk delves into the empathy gap—a hidden force within our subconscious that can leave us unprepared when we need clarity the most. By recognizing and overcoming this gap, we can turn our natural biases and heuristics into powerful tools for resilience and strength.

Discover how to craft a brain-friendly contingency plan that aligns with how our brains actually function under stress. We’ll explore the science of human biases and brain behavior, giving you the insights needed to design strategies that not only survive the heat of the moment but thrive in it. 

Did you know that the key to a successful IAM (Identity and Access Management) program lies not just in technology, but in understanding the human brain? In this talk, we’ll explore how the intricate workings of our minds influence the way we make decisions and respond to security measures. Our brains, constantly bombarded with information, often struggle to adopt new systems—unless those systems are designed with our cognitive tendencies in mind.

I’ll reveal three strategic principles, grounded in neuroscience, that can transform your IAM approach into one that seamlessly integrates with human behavior. These insights will help you create an IAM program that not only meets compliance requirements but is embraced by users with ease and confidence.

To ensure your IAM rollout is not just effective but also user-friendly, I’ll provide practical advice on leveraging cognitive biases in the design and implementation of IAM systems and processes. By applying these actionable strategies, you can navigate the complexities of human behavior and lead your organization to a smoother, more successful IAM adoption

In this talk, we’ll journey through the evolutionary landscape of the human brain, uncovering the forces that have shaped our minds over millennia. Our brains are not just products of logic and reason; they are deeply influenced by biases and instincts that have been hardwired over time. Understanding these subtle, yet powerful, influences is key to creating policies that truly resonate and drive real compliance—not just the appearance of it.

I’ll introduce three groundbreaking principles rooted in our knowledge of human behavior, designed to transform your compliance framework from a toothless paper tiger into a dynamic force for genuine adherence. Join me as we explore how blending legal precision with psychological insight can lead to policies that people not only follow but believe in.