2026 NIPA Annual Forum & Expo (NAFE)

Cybersecurity Culture: Mixing Behavioral Science and Awareness Education

Speaker: Paul Perry, CPA, CITP, CISM
Cybersecurity is a people problem, not a technology one. This session explores how behavioral science principles — such as present bias, optimism bias and System 1 vs. System 2 thinking — explain why human behavior is often the weakest link in cyber defenses. To build a resilient cybersecurity culture, organizations must use the right mix of tailored, engaging and continuous security education. Whether live sessions, webinars, simulations or microlearning, the key is variety, relevance and reinforcement.

Paul Perry, FHMA, CISM, CITP, CPA, CDPSE

Paul holds the Certified Information Technology Professional (CITP) certification, awarded to CPAs who possess both technology and business expertise. He is a thought leader, published columnist and performs 20+ presentations a year on technology and control-related topics to a wide variety of groups across the U.S. and Canada.