Behavioral Insights in Cybersecurity: A Guide to Digital Human Factors
暫譯: 網路安全中的行為洞察：數位人因指南
Sachs, Dustin S.
相關主題
商品描述
Behavioral Insights in Cybersecurity: A Guide to Digital Human Factors by Dr. Dustin S. Sachs is a timely and essential resource for cybersecurity professionals, leaders, and organizational strategists seeking to understand the powerful role of human behavior in shaping digital security outcomes.
Bridging the gap between behavioral science and cybersecurity, this book challenges the traditional reliance on purely technical defenses and explores why human error accounts for up to 95% of cybersecurity breaches. Drawing from psychology, cognitive science, and organizational behavior, Dr. Sachs provides a compelling framework for rethinking how individuals, teams, and systems interact in high-stakes digital environments.
Through real-world examples and practical strategies, the book examines how cognitive biases, decision fatigue, stress, and cultural dynamics influence security performance. Leaders will learn to recognize and mitigate biases like availability and confirmation bias, implement structured decision-making processes, and foster cultures that prioritize security without sacrificing usability or autonomy.
The book introduces the 'Technology Strategy Needs Pyramid', a human-centric model that moves beyond compliance to build mature, resilient, and ethically grounded cybersecurity ecosystems. From designing intuitive interfaces and leveraging behavioral analytics to implementing AI-driven adaptive defenses and ethical nudging, Dr. Sachs equips readers with actionable tools to align human tendencies with security goals.
Whether addressing insider threats, social engineering, or the limitations of legacy awareness training, Behavioral Insights in Cybersecurity advocates for a holistic approach that integrates technology, behavior, and culture. It is a must-read for cybersecurity leaders seeking to create sustainable, secure environments where people are not the weakest link--but the strongest asset.
This book is not just a guide--it's a call to reimagine cybersecurity leadership through the lens of human behavior, ethics, and strategic decision-making.
商品描述(中文翻譯)
《網路安全中的行為洞察：數位人因指南》由德斯汀·S·薩克斯博士撰寫，是一本及時且必備的資源，適合尋求了解人類行為在塑造數位安全結果中強大角色的網路安全專業人士、領導者和組織策略家。
本書彌合了行為科學與網路安全之間的鴻溝，挑戰了傳統對純技術防禦的依賴，並探討為何人為錯誤佔據了高達95%的網路安全漏洞。薩克斯博士從心理學、認知科學和組織行為學中汲取靈感，提供了一個引人注目的框架，重新思考個人、團隊和系統在高風險數位環境中的互動。
透過真實案例和實用策略，本書檢視了認知偏見、決策疲勞、壓力和文化動態如何影響安全表現。領導者將學會識別和減輕如可得性偏見和確認偏見等偏見，實施結構化的決策過程，並培養優先考慮安全的文化，而不犧牲可用性或自主性。
本書介紹了“技術策略需求金字塔”，這是一個以人為中心的模型，超越合規性，建立成熟、韌性和倫理基礎的網路安全生態系統。從設計直觀的介面和利用行為分析，到實施基於AI的自適應防禦和倫理引導，薩克斯博士為讀者提供了可行的工具，以使人類傾向與安全目標保持一致。
無論是應對內部威脅、社會工程還是傳統意識培訓的局限性，《網路安全中的行為洞察》主張採取一種整體方法，整合技術、行為和文化。這是一本必讀的書籍，適合尋求創造可持續、安全環境的網路安全領導者，讓人們不再是最弱的環節，而是最強的資產。
這本書不僅僅是一本指南——它呼籲重新想像通過人類行為、倫理和戰略決策的視角來領導網路安全。
作者簡介
Dr. Dustin S. Sachs, DCS, CISSP, CCISO, is a leading voice at the intersection of cybersecurity and behavioral science. With over two decades of experience securing critical infrastructure and advising global enterprises, Dr. Sachs brings a unique blend of technical expertise and psychological insight to the evolving challenges of digital security. He currently serves as Chief Technologist and Senior Director of Programs at CyberRisk Alliance, where he spearheads strategic initiatives that empower cybersecurity professionals through community-driven learning and innovation.
An award-winning cybersecurity practitioner, academic, and thought leader, Dr. Sachs holds a Doctorate in Computer Science with a specialization in Cybersecurity and Information Assurance. His research explores decision-making in cyber supply chain risk and the psychological drivers behind organizational security behavior. He has served in key roles at Fortune 500 companies, led high-impact third-party risk programs, and taught graduate-level cybersecurity courses, all while contributing to national cybersecurity discourse through leadership roles in ISC², Information System Audit and Controls Association (ISACA), and Federal Bureau of Investigation (FBI) InfraGard.
Dr. Sachs is passionate about demystifying human error and transforming it into strategic advantage. His work challenges traditional, compliance-heavy security models, advocating instead for human-centric approaches that foster resilience, accountability, and adaptive security cultures. Whether designing frameworks, advising Chief Information Security Officers (CISOs), or mentoring the next generation of cybersecurity professionals, his mission is clear: to make cybersecurity not only stronger but smarter.
When he's not exploring the psychology of digital risk, Dr. Sachs is a devoted husband and father, endlessly inspired by curiosity, connection, and the pursuit of lifelong learning.
作者簡介(中文翻譯)
達斯汀·S·薩克斯博士（Dr. Dustin S. Sachs），DCS、CISSP、CCISO，是網路安全與行為科學交匯處的領軍人物。擁有超過二十年的關鍵基礎設施安全經驗及全球企業顧問經歷，薩克斯博士將技術專業知識與心理洞察力獨特結合，應對數位安全日益演變的挑戰。他目前擔任CyberRisk Alliance的首席技術官及高級計劃總監，負責推動戰略倡議，透過社群驅動的學習與創新來賦能網路安全專業人士。
作為一位獲獎的網路安全實踐者、學者及思想領袖，薩克斯博士擁有計算機科學博士學位，專攻網路安全與資訊保障。他的研究探討網路供應鏈風險中的決策過程及驅動組織安全行為的心理因素。他曾在《財富》500強公司擔任重要職位，領導高影響力的第三方風險計劃，並教授研究生級別的網路安全課程，同時通過在ISC²、資訊系統審計與控制協會（ISACA）及聯邦調查局（FBI）InfraGard的領導角色，為國家網路安全討論做出貢獻。
薩克斯博士熱衷於揭開人為錯誤的神秘面紗，並將其轉化為戰略優勢。他的工作挑戰傳統的、以合規為重的安全模型，主張以人為中心的方法，促進韌性、責任感及適應性安全文化。無論是設計框架、為首席資訊安全官（CISOs）提供建議，還是指導下一代網路安全專業人士，他的使命都很明確：讓網路安全不僅更強大，還更智慧。
當他不在探索數位風險的心理學時，薩克斯博士是一位全心投入的丈夫和父親，無時無刻不受到好奇心、連結及終身學習追求的啟發。
