ON August 12, 2026, NIST released a concept paper advocating for a human-centered approach to cybersecurity, emphasizing the need for public feedback until September 30, 2026. This approach positions people as defenders and problem-solvers rather than viewing them as security risks. It highlights the disconnect between recognizing human factors in cybersecurity and actual practices, which often rely solely on awareness training.
The paper is based on extensive stakeholder input and outlines NIST's plan to create guidelines that empower individuals and incorporate community feedback. NIST stresses that while AI can assist in security efforts, people remain crucial to effective strategies.