The field of cyber security seems to be living with a perpetual sense of impending doom. While news headlines are continually absorbing everyone's attention and focus, a lot of the underlying security advice for organisations has remained deceptively consistent - patch your stuff, don't click links, try not giving every user an account with root/domain admin rights. One of the commonly overlooked or poorly understood aspects of mature security programs is the speed to decision - how quickly does an organisation need to respond. This presentation will focus on human decision making speeds, cognitive biases that help and harm us, lessons from cyber threat intelligence, and how our approaches impact the security of our systems in the wonderous age of artificial intelligence.
