Cyber Insights · Episode 8

Why Humans Are Your Biggest Hope (Not Threat) in Cybersecurity

Dr Louise O'Hagan, Cyber Psychology Specialist
· 30 min
  • What the privacy paradox reveals about how people behave
  • How to move from the “department of no” to security enablement
  • Why phishing simulations can miss the point

Prefer your own app? Spotify · Apple Podcasts

About this episode

“Humans are the weakest link” is one of cybersecurity's most repeated phrases. What if treating people as threats is making organisations less secure?

Dr Louise O'Hagan, Cybersecurity Governance Programme Manager and cyber psychology specialist, joins Ronan Murray and Ian Finlayson to discuss why traditional security awareness falls short, what the privacy paradox says about behaviour, and how to build resilience through culture as well as technology.

LO
Guest
Dr Louise O'Hagan
Cybersecurity Governance Programme Manager

Louise is a cyber psychology specialist focused on the human side of security and governance.

In this episode

  • What the privacy paradox reveals about how people behave
  • How to move from the “department of no” to security enablement
  • Why phishing simulations can miss the point
  • Why focus groups and surveys beat tick-box training
  • How NIS2 is making cybersecurity a boardroom issue
  • Why deepfakes exploit the same psychological triggers as traditional scams
Want to see where your gaps are?
Security Posture Review · Assessment
See the Security Posture Review

Keep going

Browse all episodes
Assessment
Security Posture Review

A structured review of your security controls, policies and technical posture, with a written report and prioritised roadmap.

See what's included
Episode 4
Key Trends in Email Security for 2025

Check Point's Ben Abbott on email security: AI-generated phishing, invoice fraud, business email compromise, and getting DMARC, SPF and DKIM right.

Listen
Insight
The Phishing Email That Does Not Need a Click

AI email agents act on messages before a human sees them. Why the inspection point now decides the outcome.

Read
Service
Consulting & Compliance

Practical support with NIS2, DORA, ISO 27001 and Cyber Essentials.

Find out more
Ian Finlayson

Got a question about security culture?

Talk to Ian. Ian Finlayson, Chief Security Services Officer at Edge7 Networks, is happy to talk through what this looks like for your environment.

Talk to Ian See the Security Posture Review

ISO 27001:2022 · ISO 9001:2015 · Cyber Essentials · Networking and security specialists since 2018