Treats people as partners in security

Designs training that supports autonomy, competence, and belonging, and uses peers as messengers.

Intrinsic motivation depends on autonomy, competence, and relatedness. Treating humans as the solution rather than the problem is a growing position in security research.

How to observe it: Voluntary participation rates; peer-led content; language audits of training materials.

Supporting evidence

• Moving from a ‘human-as-problem” to a ‘human-as-solution” cybersecurity mindset Zimmermann & Renaud, 2019
• Who Provides Phishing Training? Facts, Stories, and People Like Me Wash & Cooper, 2018
• Self-determination theory and the facilitation of intrinsic motivation, social development, and well-being Ryan & Deci, 2000

Context

• Is the responsibilization of the cyber security risk reasonable and judicious? Renaud et al., 2018