Episode Summary:Most cyber breaches are not technology failures. They are psychological successes. In this episode, cybersecurity psychology takes centre stage as Dr James Carlopio explains how scammers exploit human instinct, habit and urgency, and what lawyers can do to build safer cyber cultures.Guest:Dr James Carlopio, psychologist and co-founder, Cultural Cyber SecurityPhD in organisational psychologyExpert in cyber psychology, social engineering and cultural approaches to cyber riskhttps://au.linkedin.com/in/jamescarlopiohttps://www.culturalcybersecurity.com/james-carlopio-ccsHost:Jayne Gurton, Law Institute of [email protected] | https://www.linkedin.com/company/law-institute-of-victoriaEpisode Overview:Cybersecurity psychology explains why most breaches occur even in organisations with strong technical controls. In this episode, Dr James Carlopio explores how social engineering, phishing scams and AI-driven deepfakes exploit hardwired human instincts rather than technical weaknesses.Drawing on real-world examples, James explains why awareness alone is not enough, and why behaviour change requires skills, repetition and cultural leadership. Legal practitioners will gain practical insights into reducing cyber risk through everyday habits, verification practices and leadership role modelling, with a focus on making cybersecurity personal, relevant and embedded in day-to-day legal practice.Topics & Timestamps:00:04 Why cybersecurity failures are mostly human, not technical01:47 Why law firms are attractive targets for scammers03:31 Common scam tactics targeting lawyers and legal staff05:25 Psychological principles criminals exploit06:44 Deepfakes, voice cloning and verification strategies09:09 Why old confidence scams still work10:24 Practical, low-cost cyber prevention strategies13:36 Emerging threats and AI-driven scam campaigns16:20 Simple actions listeners can take immediatelyKey Takeaways:Most cyber breaches succeed by exploiting human behaviour rather than technical gapsLaw firms are high-value targets because of money movement and sensitive dataSocial engineering relies on urgency, habit and trustAwareness alone does not build cyber resiliencePractical skills and regular practice reduce risk more than one-off trainingLeadership behaviour and culture drive cybersecurity outcomesResources & Links:LIV Cybersecurity Hub – Practical guidance and resources for Victorian legal practitioners | https://www.liv.asn.au/cybersecurityhubLaw Institute Journal: Cybersecurity and phishing risks – Analysis and guidance for legal practices | https://www.liv.asn.au/lijOffice of the Australian Information Commissioner – Notifiable Data Breaches reports | https://www.oaic.gov.au/privacy/notifiable-data-breachesCultural Cyber Security – Insights on cyber psychology and behaviour change | https://www.culturalcybersecurity.comAbout This Podcast:Cross-Examined is a new podcast from the Law Institute of Victoria. Tune in to hear experts discuss hot topics in the law and the changes shaping the legal profession. Regular episodes will cover everything from AI and cyber threats to ethical dilemmas, workplace taboos and practice management insights.This podcast is recorded on the traditional lands of the Wurundjeri people of the Kulin Nation. The Law Institute of Victoria acknowledges the Traditional Custodians of Country across Australia. We pay our respects to Elders past and present.Disclaimer:This podcast is for informational purposes only and is not intended to replace professional legal advice. The views expressed in this podcast do not necessarily reflect the views of the Law Institute of Victoria (LIV). The LIV is not responsible for any losses, damages or liabilities that may arise from the use of this podcast. Listeners should seek independent legal advice for their matters.Production Information:Produced by: The Law Institute of VictoriaProducer and audio editor: Garreth HanleyMusic: Garreth HanleyCopy and show notes: Louise SuretteConnect With Us:Email: [email protected]: https://liv.asn.auLinkedIn: https://www.linkedin.com/company/law-institute-of-victoriaApple Podcasts: https://podcasts.apple.com/au/podcast/cross-examined/id1858765728Spotify: https://open.spotify.com/show/0zvyk5xia4wYv9YWcXphgVMentioned in this episode:2026 Legal Forum advertLegal Forum 2026: Discover the forum where lawyers come to connect, be inspired and stay ahead. The Law Institute of Victoria’s flagship, full-day conference brings ideas, leading experts and the profession together to learn, connect and shape the future of legal practice. Wednesday 10 June | Pullman Melbourne on the Park | https://www.liv.asn.au/legalforum