Understanding how and why people respond to cyber threats is key to building cyber-workforce resilience.