Moving from a ‘human-as-problem” to a ‘human-as-solution” cybersecurity mindset

Key finding

A problematization analysis finds government, industry and hacker discourse treats humans as the problem, with controls designed to constrain them. The authors propose 'Cybersecurity, Differently', which assumes people are well-intentioned and builds on what contributes to positive outcomes and resilience.

Why it matters

Provides a peer-reviewed framework for treating employees as security assets rather than liabilities, the core cultural shift PsySec advocates.

Informs

• Treats people as partners in security supports

Cite

Zimmermann, V., & Renaud, K. (2019). Moving from a ‘human-as-problem” to a ‘human-as-solution” cybersecurity mindset. International Journal of Human-Computer Studies, 131, 169-187. https://doi.org/10.1016/j.ijhcs.2019.05.005