Human-Centered Cybersecurity

Human-Centered Cybersecurity Concept Paper

Cybersecurity works best when it works with people, not against them — and that's exactly what human-centered cybersecurity (HCC) is all about. The Human-Centered Technologies team at NIST is releasing a concept paper on HCC, and we want your input. Our goal is to build a shared understanding of what HCC really means, then chart a path toward practical guidelines and resources that organizations can actually use to make meaningful change by:

• Clarifying whether HCC is primarily an approach—measured by indicators of adoption and maturity—or an outcome—requiring other measures of success such as culture, trust, usability, or resilience
• Communicating the relationship between HCC and existing NIST cybersecurity guidelines and frameworks
• Assisting organizations in implementing and enhancing HCC within their cybersecurity programs.

But we can't do that without you. We invite you to read the blog introducing our “Human-Centered Cybersecurity Guidelines and Resources Concept Paper” and submit your feedback via [email protected] by September 30, 2026.