Why Humans Suck at Calculating Risk and How It Affects Security - Masha Sedova

Explore the psychological factors behind human risk calculation and their impact on security decision-making in this 24-minute conference talk from LevelUp 0x03. Delve into risk biases such as near-misses and loss aversion, examining how they influence vulnerability introduction and delayed remediation in organizations. Analyze real-world examples, including the Columbia Space Shuttle disaster and Mars Rover simulation, to understand the consequences of flawed risk assessment. Learn effective strategies for using fear messaging and addressing perceived threats to improve cybersecurity postures. Gain valuable insights into human behavior and risk perception to enhance organizational security practices and decision-making processes.