Definition
Human-Centred Security is an approach to designing systems, processes and safeguards that accounts for users' capabilities, limitations and actual ways of working.
Human Explanation
Security measures should help people work securely rather than create conditions that encourage them to bypass the intended process.
Why it Matters
Controls aligned with real user needs and working conditions are more usable, more consistently followed and therefore more effective.
Conceptual Boundary
Human-Centred Security does not weaken security requirements for convenience. It seeks ways to satisfy those requirements that people can understand and apply reliably in real work.
Practical Perspective
When users repeatedly bypass a safeguard, the organisation should examine the design of the safeguard and the work system before assuming that another reminder will solve the problem.