How Should Security Be Architected for Human Error?
Oct 15, 2026 · 25 min · 14 segments
All links and images can be found on CISO Series We've all internalized that humans are the weak link in cybersecurity. Why do…
Oct 15, 2026 · 25 min · 14 segments
All links and images can be found on CISO Series We've all internalized that humans are the weak link in cybersecurity. Why do…
Geoff BelknapHost
Kieran HumanGuestBut before we introduce that person, I'm gonna start with you, Jeff, this question.
But if we know that, why do we still rely on humans to be perfect? That is our plan.
So why aren't we building more specific controls to sit between that fallible behavior and the rest of the business? W- we think we can sort of program the humans out of their mistakes, but we can't do that, can we, Jeff?
Also, side note, this is gonna be really funny when we introduce who our guest is.
But some humans make a ton of mistakes, and some are just perfect, I'm sure, in, in every regard.
But because some humans can make mistakes, you really cannot rely on controls that just expect a person to do the right thing every time.
Because as much as we would like to, we are really lousy LLMs, or maybe we're really good ones, but, like, determinism is not a guaranteed outcome when it comes to a human, and we love to be lied to.
I mean, the whole point of the attacker is to try to fool us, to break our will to do something that we shouldn't do.
It's like we make mistakes, and the person going after us, trying to get through us, is trying to cause us to make mistakes.
They're trying their best to convince us that it's really important for us to do this thing right now and to not worry about what could go wrong and to not even think about it.
But before we introduce that person, I'm gonna start with you, Jeff, this question.
But if we know that, why do we still rely on humans to be perfect? That is our plan.
So why aren't we building more specific controls to sit between that fallible behavior and the rest of the business? W- we think we can sort of program the humans out of their mistakes, but we can't do that, can we, Jeff?
Also, side note, this is gonna be really funny when we introduce who our guest is.
But some humans make a ton of mistakes, and some are just perfect, I'm sure, in, in every regard.
But because some humans can make mistakes, you really cannot rely on controls that just expect a person to do the right thing every time.
Because as much as we would like to, we are really lousy LLMs, or maybe we're really good ones, but, like, determinism is not a guaranteed outcome when it comes to a human, and we love to be lied to.
I mean, the whole point of the attacker is to try to fool us, to break our will to do something that we shouldn't do.
It's like we make mistakes, and the person going after us, trying to get through us, is trying to cause us to make mistakes.
They're trying their best to convince us that it's really important for us to do this thing right now and to not worry about what could go wrong and to not even think about it.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.
