If we can better understand what’s behind human error, we can design more effective training programs and security practices that work with, rather than against, human nature.