The Risks We Remember: How Availability Bias Creates Blind Spots in Critical Infrastructure Security Decisions

<p><strong>How much of what we judge to be a material security risk is driven by evidence — and how much by what we can most easily remember?</strong></p><p>In this episode, <strong>Tim Slattery and Marina Shteinberg of Pentagram Advisory</strong> explore the <strong>availability heuristic</strong> and what behavioural science can teach us about security risk management and decision making under uncertainty.</p><p>In an era of heightened uncertainty, Boards, executives and security leaders are required to make consequential decisions with information that may be incomplete, uneven or constantly changing. </p><p>Recent incidents, personal experience and highly visible threats can quickly dominate attention — while less familiar but potentially material risks remain outside the spotlight.</p><p>Tim and Marina examine how availability bias can influence security risk assessment, risk prioritisation and investment decisions, and why a formal risk management framework does not remove human judgement — it structures where that judgement is exercised.</p><p>They also consider practical ways to strengthen decision-making through broader evidence, structured challenge and greater transparency around the reasoning behind risk ratings.</p><p><strong>Because what is memorable is not necessarily what is material. And unfamiliarity is not evidence of safety.</strong></p>