Forensics sounds like something that should be clean, technical, and data-driven. But if you've ever sat in a post-mortem meeting or led an investigation, you know that what actually happens is... messier.

Because even when we're dealing with facts, our brains are doing something else entirely.

They're telling stories.

We see a clue. We build a theory. And then, without noticing, we start looking for more things that fit the story we've already made up.

This isn’t a character flaw. It’s just…

Compliance isn’t just about ticking boxes. it's about making smart, informed decisions.
But even the most diligent among us can fall prey to cognitive biases, which are those mental shortcuts that can cloud our judgment.

In the world of cybersecurity, understanding and managing these biases can keep you ahead of the curve.

Here’s a quick look at a few common biases that might be influencing your compliance efforts.

Seeing what you want to see

Ever been so sure of something that you only notice …

Do you ever click on something you know you shouldn’t?

I do.

And so do your colleagues. Your boss. Your team. Pretty much everyone.

Not because we’re ignorant. Or because we haven’t been through training. But because in the moment, instinct wins.

That sentence – "you’re not fighting ignorance, you’re fighting instincts" – popped out of my mouth during a Q&A last week.
And I’ve been thinking about it ever since. Because it captures something that sits at the heart of every awareness program t…