Welcome to Week 5

Throughout this course, a consistent finding has emerged from almost every case study, every set of statistics and every framework examined: the human element is the most significant and most complex dimension of cyber security. Technical controls can be designed, deployed and monitored with relative precision. Human behaviour is considerably less predictable, more contextually variable and more deeply shaped by psychology, culture, organisational environment and personal circumstance.

Week 5 takes this human dimension seriously. It does not treat people as a problem to be managed or a vulnerability to be patched. It explores the genuine complexity of human behaviour in security contexts: why intelligent, well-intentioned people make decisions that create risk, what motivates the small minority who deliberately cause harm, how organisations can build cultures that support security without creating fear or mistrust, and what the ethical boundaries of security management are when organisations exercise power over the people and data in their care.

This week also examines the legal and regulatory landscape in greater depth, focusing on what compliance means in practice for managers rather than simply what the rules say. And it considers the professional and ethical responsibilities that come with managing sensitive data and exercising authority over others in a digital environment. These are not abstract questions. They arise in real management decisions every day.

This week you will:

• Understand the psychological and organisational factors that create human vulnerability to cyber threats
• Explore the full spectrum of insider threats, from malicious actors to negligent employees, and examine management responses to each
• Examine legal and regulatory frameworks with a focus on practical managerial obligations rather than abstract compliance requirements
• Consider the ethical dimensions of data protection, employee surveillance and the use of monitoring technologies
• Reflect on professional responsibility in cyber security and what it means to lead ethically in a security context
• Analyse a global case study with significant ethical implications across multiple dimensions
• Complete a reflective homework task and a weekly knowledge check