One of the questions I’m frequently asked is why the state of cybersecurity seems to get worse every year instead of better. There are, of course, many contributing factors. One of the fundamental problems is that we, as humans, are collectively terrible risk managers.