Individuals are vulnerable to cyber security threats because of outdated hardware, required but not installed software updates, and the proliferation of attacks on infrastructure. However, technical solutions to technical problems will not fully mitigate risk, as it is people who must engage with the technology. People themselves pose a significant threat to cyber security. In this chapter, we explore psychological factors including base rate neglect, self-enhancement, illusion of invulnerability, and sociocultural orientations that threaten the safety of cyber infrastructure. We discuss the insufficiency of current risk protection services offered in the industry, given their inability to mitigate psychological barriers to accurate risk assessment and harm prevention. We offer implications for increasing the accuracy of self-assessments of risk and managing the threat of cyber attack.