The unseen vulnerability: Mental health and human risk in cyber security

In an era where "human error" is often labelled the weakest link in cybersecurity, the role of mental health behind those errors remains under-explored. Offering a fresh perspective beyond the usual focus on negligent users or malicious insiders, this session examines how mental well-being and psychological factors directly influence security outcomes. High-pressure cyber environments and constant alertness can lead to stress, burnout, and anxiety—factors that can erode vigilance, decision-making, and ethical judgment. A fatigued staff member might miss a critical alert or fall prey to a phishing ploy, and a burned-out insider could become disengaged or careless with sensitive data.

This presentation shines a light on the intersection of human risk and mental health, arguing that supporting the mind is as crucial as patching systems. Attendees will gain insights from emerging research and real-world examples demonstrating that mental wellness is not a "soft" issue but a strategic imperative for cyber resilience. The talk will outline practical strategies for leaders to integrate mental health considerations into security training, incident response, and workplace culture. By addressing this often-overlooked vulnerability, organizations can foster more vigilant, ethical, and resilient teams—ultimately strengthening their defense against both human error and adversaries. For security executives and policymakers, these insights offer a blueprint for more human-centric cyber resilience strategies.

Key Takeaways

This talk is a call to action: to stop accepting burnout as a badge of honour, and to reframe mental well-being as a core security control. Because until we secure the humans behind the systems, we will always have gaps.