Robert Siciliano, who traces his path into security from early experiences with crime, teaching physical self-defense, and being hacked in the mid-1990s. Robert argues that most corporate security training is compliance-driven "security theater" focused on phishing, creating security fatigue while leaving human behavior unchanged.