People performing contentiously and consistently is a lofty goal. Risk management gives us the process to follow. Controls frameworks gives us the standards to set and meet. Yet it is people who ultimately decide our security posture. In this presentation, we look at the psychology and behavior science of individuals making risk decisions and leaders affecting culture change. Attendees will leave with insights and pragmatic tactics for improving the human element in risk and compliance.