The Importance of Human Factors for Cybersecurity

Abstract

A Cybersecurity professional needs, among other skills, to understand the human factors inherent to social engineering attacks. This article reflects on the need to consider human beings as the most important link in the chain, which has strengths and weaknesses, but is not necessarily the weakest link. To be better professionals and achieve the objective of transforming user behavior, we need to understand, in addition to technology, also the aspects of psychology and human evolution that can bring us insights into how we think and why we act in certain ways in order to increase the protection of personal data and organizations.