Human-driven and human-centred cybersecurity: policy-making implications

Abstract

Purpose

The purpose of this paper is to challenge the prevailing, stereotypical approach of the human aspect of cybersecurity, i.e. treating people as weakness or threat. Instead, several reflections are presented, pertaining to the ways of making cybersecurity human-centred.

Design/methodology/approach

This paper bases on the authors’ own experiences, gathered whilst working in cybersecurity projects; the resulting comments and reflections have been enriched and backed up by the results of a targeted literature study.

Findings

The findings show that the way the human aspects of cybersecurity are understood is changing, and deviates from the stereotypical approach.

Practical implications

This paper provides a number of practical recommendations for policymakers, as well as cybersecurity managers on how to make the cybersecurity more human-centred; it also inspires further research directions.

Originality/value

This paper presents a fresh, positive approach to humans in cybersecurity and opens the doors to further discourse about new paradigms in the field.

Citation

Pawlicka, A., Pawlicki, M., Kozik, R. and Choraś, M. (2022), "Human-driven and human-centred cybersecurity: policy-making implications", Transforming Government: People, Process and Policy, Vol. 16 No. 4, pp. 478-487. https://doi.org/10.1108/TG-05-2022-0073