To Protect People, You Have to Protect Information: A Human-Centered Design Approach to Cybersecurity

Key Insights

• •

  Security means different things to different roles, making cross-disciplinary collaboration essential.

• •

  Users (Alice) often do not think about security until it directly interrupts their tasks.

• •

  Charlie personifies the security systems and communications users interact with; their unhelpfulness harms user trust.

• •

  Improving the relationship between Alice and Charlie is critical to enhancing security behaviors and outcomes.

• •

  Threat actors understand users and security systems better than many security teams do, exploiting weak points.

• •

  Onboarding and signup are crucial moments to influence secure user behaviors because users are motivated and captive.

• •

  Security messaging must balance clarity and avoiding fatigue caused by false positives or jargon.

• •

  AI-driven social engineering and deepfakes will make future attacks more convincing and harder to detect.

• •

  Designers should anticipate user objections and behaviors when creating security flows.

• •

  Clear standard protocols for unusual financial requests reduce vulnerability to phishing scams.

Notable Quotes