Dustin Sachs: The Human Factor in Cybersecurity | Episode 189Dustin Sachs: The Human Factor in Cybersecurity | Episode 189
Brain Shaman
Cyber strategist Dustin Sachs talks with Michael Waite about how human psychology, cognitive biases and AI shape cybersecurity more than pure technology. The conversation focuses on designing systems around real people, rethinking training, and improving decision-making to stay safer online.
53:14•30 Sept 2026
The Human Side of Cybersecurity with Dustin Sachs
Episode Overview
- Human behaviour, not just technical flaws, drives most cybersecurity incidents, and needs to be designed for rather than blamed.
- Cognitive biases like the curse of knowledge and authority bias can distort risk assessments and training expectations.
- Annual or once-off security awareness training is rarely enough; security needs to be embedded into everyday behaviour and tools.
- AI is a powerful helper that can take over repetitive tasks, but humans still have to set objectives, context and boundaries.
- Focusing on decision hygiene—how decisions are made rather than just the outcome—can lead to more consistent, safer choices online.
“"AI is not going to take your job. Somebody who knows how to use AI is going to take your job."”
What are the common struggles and victories in addiction recovery? While Brain Shaman usually focuses on mental health, addiction, and lifestyle change, this conversation takes a sharp turn into digital risk and how human behaviour shapes cybersecurity. Cybersecurity strategist and behavioural scientist Dustin Sachs joins host Michael Waite to unpack why our minds, not our machines, are often the weak point in online safety.
Dustin pushes back on the phrase "human failure", explaining that "it's actually human, the design of humans" and that the real gap is how cyber teams design systems and policies without truly understanding the people using them. You'll hear about cognitive biases like the "curse of knowledge"—that moment when tech-savvy people assume everyone else knows what a phishing email looks like—and "authority bias", where a shiny certification suddenly makes a vendor seem safer than they really are.
Dustin shares how so many organisations throw training at staff once a year and then wonder why people still click dodgy links, calling out the habit of "we just need to train them better" as far too simplistic. There’s plenty on AI too. Dustin’s CISO summed it up with a memorable line: "AI is not going to take your job.
Somebody who knows how to use AI is going to take your job." From generative tools to software development, Dustin keeps stressing that AI is a powerful assistant, not a full replacement for human judgement. For anyone working on their own habits, this episode offers a fresh angle: the same brain shortcuts that drive cravings, lapses and recovery decisions also shape how you behave online.
If you’re curious how your everyday thinking patterns might leave you exposed on the internet, this chat is a smart place to start. What bias might be quietly steering your next click?

Do you want to link to this podcast?
Get the buttons here!
More From This Show
The latest episodes from the same podcast.
