How to defend the full social engineering attack chain | Register for the webinar to learn more

Human Risk Management

Carter Zupancich

Human Risk Management Leader

Carter is Head of Applied Cyber Human Risk Management at Doppel, owning how the company designs, runs, and measures social engineering simulations for customers.

Carter Zupancich, Human Risk Management Leader

About

Carter partners with Product and Engineering to turn frontline offensive tradecraft into product capability, including the AI voice agents Doppel uses for vishing.

Before joining Doppel, he designed and executed vishing, smishing, phishing, deepfake, and physical security assessments for enterprise and government organizations. He has personally run more than 8,500 human-to-human vishing calls, alongside tens of thousands of smishing and hundreds of thousands of phishing engagements.

Carter is known for vishing and help desk attack simulation, and for charting the shift from human-run social engineering to AI voice agents at scale. His work centers on the moment the decision gets made: what makes a pretext credible, where verification bends under pressure, and what moves someone to report an attack rather than act on it. He turns those findings into the scenarios and evaluations that teach Doppel's platform to judge human risk the way a practitioner would.

Badges: Speaker, BSides Chicago 2025; Layer 8 Podcast Ep. 141.

Put Applied Cyber expertise behind your defense.

Book a demo