Below are a selection of books written by authors who specialise in the human aspect of cybersecurity. Some are progressive in their approach. Others, less so.

However, each book has some real gems and all provide incredible insights into the range of views, ideas and challenges in the field.

Recommended reading for anyone who wants to specialize in this field or deepen their expertise.

  1. Social Engineering, the science of human hacking

Christopher Hadnagy

Screenshot 2024-10-09 at 09.49.44.png

Social Engineering: The Science of Human Hacking

This book reveals the craftier side of the hacker’s repertoire―why hack into something when you could just ask for access? Undetectable by firewalls and antivirus software, social engineering relies on human fault to gain access to sensitive spaces.

  1. You Can Stop Stupid - Stopping Losses from Accidental and Malicious Actions

Ira Wrinkler & Dr Tracy Celaya Brown

Screenshot 2024-10-09 at 09.51.07.png

You CAN Stop Stupid: Stopping Losses from Accidental and Malicious Actions eBook : Winkler, Ira, Brown, Tracy Celaya: Amazon.co.uk: Kindle Store

Using lessons from tested and proven disciplines like military kill-chain analysis, counterterrorism analysis, industrial safety programs, and more, Ira Winkler and Dr. Tracy Celaya's You CAN Stop Stupid provides a methodology to analyze potential losses and determine appropriate countermeasures to implement.

  1. Security Culture -  A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Hilary Walton

Screenshot 2024-10-09 at 09.54.23.png

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Hilary Walton combines her research and her unique work portfolio to provide proven security culture strategies with practical advice on their implementation. And she does so across the board: from management buy-in, employee development and motivation, right through to effective metrics for security culture activities.