Discusses human and organizational decision making from a variety of perspectives. Applies different risk assessment and decision making frameworks that are relevant to personal and organization cybersecurity, with a focus on the quantitative Factor Analysis of Information Risk (FAIR) model. Considers monetary, social and societal costs of cybersecurity decisions. Considers a range of questions relating to cybersecurity, from whether to install a game on a smartphone to how to allocate scarce information security resources in an organization.