Technology frameworks alone cannot secure an organization. Human behavior - shaped by age, emotion, cultural context and individual psychology - remains the most underestimated variable in cybersecurity. Building a truly resilient security culture requires moving beyond universal awareness training toward targeted, profile-based education that meets people where they are.

This session, led by Shee Yan Ho, director of internal audit at the Supreme Court of Singapore, will cover:

• Why one-size-fits-all phishing simulations and awareness programs fail, and how understanding the demographic and emotional profile of your workforce enables more effective, lasting behavioral change;
• How the psychological aftermath of scam incidents and phishing test failures directly affects staff vigilance and workplace culture if left unaddressed;
• Why data classification is ultimately a people decision, and how aligning security culture with governance structures creates a more sustainable and resilient cybersecurity ecosystem.