Stop Blaming Humans: Rethinking Security Culture with John Scott | 40

What can cybersecurity learn from industries where human error can have life-or-death consequences? In a first for the Cyber Leaders Podcast, Ciaran and James kick off the latest series in video with SANS instructor and MD of Wildpark Security, John Scott. As an expert on culture and humans in security, John shares his knowledge on driving better human behaviors and outcomes; from understanding human error, to what cyber can learn from the safety industry and why people aren’t the weakest link.

Highlights:

John Scott’s work

John’s work across human risk and security culture.

• John Scott | SANS Institute
• Wildpark Security Consulting
• Why Are We? Newsletter
• Cyber Security Expo 2023: Lessons in Managing Human Risk Presented by John Scott

The Bank of England’s approach to Cybersecurity

How the Bank responded to growing cyber risk and strengthened its information security.

• Financial Services (Banking Reform) Act 2013
• Record of Financial Policy Committee Meeting held on 18 June 2013 | Bank of England
• 10 Steps to Cybersecurity | CESG

Security Culture and Changing Behavior

How understanding human behavior can help build a stronger security culture.

• 2025 Data Breach Investigations Report 2025 Data Breach Investigations Report
• IBM Security Services 2014 Cyber Security Intelligence Index
• Errors | ICO
• Human Error: Models and Management | Error Types (Slips, Lapses & Mistakes)
• Reason explains Swiss Cheese Model
• GoDaddy apologized for insensitive phishing email sent to its employees offering a fake bonus
• Fire Drill - The Office US
• Cultural Web Model | Think Insights

Additional Resources

The Man Who Broke Into the Bank of England's Gold Vault, Then Told Them Why longer passwords aren’t enough — and what you should do instead – Tech Advisory

Subscribe & Follow:

• Subscribe to the podcast on Apple Podcasts, Spotify, or your favorite podcast platform.
• Follow us on X, Facebook, and LinkedIn for updates.

Contact:

• Have questions or comments? Email us at cyberleaderspodcast@sans.org