NIST Seeks Public Input on Human-Centered Cybersecurity Guidelines to Empower Users
The National Institute of Standards and Technology (NIST) has released a concept paper on Human-Centered Cybersecurity (HCC) and is soliciting public feedback to develop practical guidelines and resources. This initiative aims to shift the focus of cybersecurity from merely containing human vulnerabilities to empowering individuals as defenders, reporters, and problem-solvers. NIST recognizes that despite significant investments in cybersecurity technology and training, breaches often stem from human error, such as clicking malicious links or using weak passwords. The current approach, which often relies heavily on awareness training, is deemed insufficient as it fails to address underlying issues like complex security processes or an uninformed organizational security culture. The concept paper summarizes key HCC themes identified through input from hundreds of cybersecurity practitioners and researchers, proposing approaches and formats for future guidelines. 
