In this lecture, students will learn about the importance of heuristics and biases and how these can affect cybersecurity. Students will learn how  decisions are actually made and how these processes differ from the best or optimal methods for decision making. This lecture will contrast normative and descriptive theories of reasoning, judgment, and decision making. We will explore judgments of risk and uncertainty and heuristics and biases.