Dr Julie Haney

Human-Centered Cybersecurity Program Lead, National Institute of Standards and Technology

Rob Knowles

Insider Threat Analyst, Navy Federal Credit Union

Ava Woods-Fleegal

Head of Cyber Training, Engagement & Awareness, RTX

Oz Alashe MBE

CEO & Founder, CybSafe

SESSION

Panel discussion #1

This panel will discuss the topics covered in our first three presentations. Our panellists will analyse the themes, sharing what they see as most important takeaways and how the ideas can be applied in the workplace.

Speakers

Dr Julie Haney

Julie Haney leads the Human-Centered Cybersecurity program at the National Institute of Standards and Technology (NIST). She conducts research about the human element of cybersecurity, including the usability and adoption of cybersecurity solutions, work practices of cybersecurity professionals, and people's perceptions of and interactions with cybersecurity. Previously, Julie spent over 20 years working in the U.S. Department of Defense as a cybersecurity practitioner and technical director. She has a PhD in Human-Centered Computing and an M.S. and B.S. in Computer Science.

Rob Knowles

Rob Knowles has been lurking around cybersecurity long enough to remember when "zero trust" was just how people felt about their VPN. After over a decade of fixing everything from printers to BlackBerrys—often at the same time—he escaped the technical debt of systems and network engineering and moved into insider threat, where the puzzles are harder and the answers are never in a log file.

Now nearly eight years into his time at Navy Federal, Rob focuses on the threats that don't come from outside the firewall—where technology meets human behavior. Along the way, he's worked in utilities, healthcare, and government contracting, an experience that left him educationally enriched and permanently concerned about the cybersecurity of critical infrastructure.

Rob holds an M.S. in Cybersecurity from George Mason University and serves as Steering Committee Chair for the FS-ISAC Insider Threat Working Group. He's the creator of insiderthreatanalyst.com, builder of PhishCheck, certified beyond good judgment, forever feeding the CPE machine, and convinced the best security work starts when people aren't treated as the problem.

Ava Woods-Fleegal

Ava Woods-Fleegal is an Associate Director leading Training, Engagement, and Awareness within Cyber, where she drives enterprise strategy focused on human behavior and cybersecurity. With experience leading security awareness programs across organizations like RTX and Zoom, Ava specializes in transforming awareness from a compliance exercise into a measurable driver of behavior change. Her work focuses on helping organizations understand their current state, define a desired future state, and implement strategies that influence how people make security decisions in real-world moments. She has led the evolution of fragmented awareness efforts into cohesive, data-driven capabilities grounded in governance, user experience, and impact. Ava also contributes to the broader security awareness community through industry collaboration and knowledge sharing. Ava is passionate about redefining how organizations approach human risk—shifting the focus from training delivery to sustained behavior change at scale.

Oz Alashe MBE

Oz Alashe MBE is CEO and Founder at CybSafe, a behavioural science and data analytics company that builds software to better manage human risk. A former UK Special Forces Lieutenant Colonel, Oz is focused on making society more secure by helping organisations address the human aspect of cyber security. He has extensive experience and understanding in the areas of intelligence insight, complex human networks, and human cyber risk & resilience.

He's also passionate about reducing societal threats to stability and security by making the most of opportunities presented through advancements in technology. Oz was made an MBE in 2010 for his personal leadership in the most complex of conflict environments.

Oz chairs the UK Government's (DCMS) Cyber Resilience Expert Advisory Group. He also sits on the Advisory Board for the Research Institute in Sociotechnical Cyber Security (RISCS). He's an Expert Fellow at The Security, Privacy, Identity and Trust Engagement NetworkPlus (SPRITE+), as well as the Royal United Services Institute (RUSI).