Human-Centered Cybersecurity Research: A Guide

Human-centered cybersecurity research is the practice of studying people, workflows, and organizational contexts to improve security outcomes. According to Nist.gov, in a concept paper published on August 17, 2026, the agency seeks feedback to build practical human-centered cybersecurity guidelines that go beyond awareness training. Evidano is an AI-powered qualitative data analysis platform that helps researchers analyze interviews, open-ended surveys, and documents. According to Nist.gov, the concept paper summarizes input from "hundreds of cybersecurity practitioners and researchers, " and Nist.gov requests feedback by September 30, 2026.

Key Takeaways

According to Nist.gov, published August 17, 2026, NIST has released a concept paper on human-centered cybersecurity and invites public feedback to develop practical guidelines.

Nist.gov reports the concept paper draws on input from "hundreds of cybersecurity practitioners and researchers, " as of August 17, 2026.
Nist.gov sets a public comment window that closes on September 30, 2026, for the "Human-Centered Cybersecurity Guidelines and Resources Concept Paper."
Nist.gov warns that traditional reliance on awareness training alone is insufficient, citing organizational causes like disruptive security processes and security fatigue, noted in referenced studies from 2024 and 2025.

What Happened and How NIST Frames Human-Centered Cybersecurity

Nist.gov published a concept paper on August 17, 2026 that proposes building practical, human-centered cybersecurity guidelines to complement existing NIST cybersecurity publications.

Nist.gov defines human-centered cybersecurity as focusing on "everyone who impacts or is impacted by cybersecurity, " and emphasizes treating people as defenders and problem-solvers rather than only as vulnerabilities.

Nist.gov states the concept paper is grounded in stakeholder input gathered through surveys, interviews, and workshops, and Nist.gov explicitly frames the initiative as "developed with the community, not handed down to them."

Findings Snapshot

Date	Metric	Value	Implication
August 17, 2026	Concept paper published	Nist.gov concept paper on human-centered cybersecurity	Start point for public feedback and guideline development
As of August 17, 2026	Stakeholder input	"Hundreds of cybersecurity practitioners and researchers"	Provides empirical basis but requires systematic analysis for themes and gaps
September 30, 2026	Public comment deadline	Deadline for feedback to human-cybersec[at]nist[dot]gov	Opportunity for researchers and practitioners to shape NIST guidance

Implications for UX and Security Research Teams

Nist.gov signals that research teams must move from training-centered interventions toward design and process changes that fit real workflows.

Nist.gov cites studies from 2024 and 2025 linking burnout and security fatigue to poor security outcomes, so UX and security researchers should measure not only knowledge but also usability, workload, and emotional responses.

Nist.gov recommends community involvement, so research teams should plan participatory methods such as workshops, diary studies, and structured interviews to collect the kind of qualitative input NIST used.

How Evidano Helps Research Teams Close the NIST How-To Gap

Problem: Dispersed qualitative inputs slow synthesis

Answer: Research teams need fast, defensible synthesis of interviews, surveys, and workshop notes.

Evidano is an AI-powered qualitative data analysis platform that helps researchers analyze interviews, open-ended surveys, and documents, and Evidano ingests transcripts, notes, and PDFs so teams can convert scattered inputs into themes quickly.

Evidano features thematic, content frequency, and cross-segment analyses that accelerate turning the "hundreds of" stakeholder comments Nist.gov cites into prioritized recommendations.

Problem: Manual transcription and translation add delay

Answer: Accurate, fast transcription and translation are essential to keep multi-source projects on schedule.

Evidano supports transcription and translation workflows, so teams collecting interview and workshop audio for NIST-style submissions can automate transcription, apply custom dictionaries, and redact PII while maintaining traceability; see the speech-to-text feature.

Problem: Stakeholder heterogeneity complicates cross-segment analysis

Answer: Teams must compare themes across role, sector, or experience level to craft usable guidelines.

Evidano provides cross-segment analysis and visualizations so researchers can quantify how concerns vary by role, and Evidano's AI chat over your documents helps teams interrogate findings and prepare concise evidence-backed comments for NIST.

Problem: Need to produce actionable guidelines, not just observations

Answer: Research outputs must translate into concrete design changes or policy recommendations.

Evidano helps convert qualitative themes into hierarchical codes and evidence summaries that map directly to design or process recommendations, helping teams respond to Nist.gov with structured, evidence-backed inputs before September 30, 2026.

For a broader feature overview, see Evidano features.

FAQ: human-centered cybersecurity research

What is human-centered cybersecurity research and why does NIST want it?

Answer: Human-centered cybersecurity research studies how people interact with security systems to design usable, effective protections.

Nist.gov explains in its August 17, 2026 concept paper that the goal is to move beyond training-only approaches and to develop practical guidelines that account for user abilities, workflows, and organizational culture.

How can researchers prepare input for NIST's September 30, 2026 comment deadline?

Answer: Researchers should synthesize interview and survey findings into succinct, evidence-backed recommendations.

Nist.gov requests feedback by September 30, 2026, so teams should use structured summaries, highlight common themes from stakeholder input, and cite specific studies or datasets to help NIST prioritize practical guidance.

What methods generate the kinds of 'hundreds' of stakeholder inputs NIST cites?

Answer: Mixed-methods approaches combining surveys, interviews, workshops, and diary studies produce broad stakeholder input.

Nist.gov reports that its concept paper relied on surveys, interviews, and workshops, and referenced research from 2024 and 2025 that links burnout and security fatigue to usability and compliance problems.

How does AI qualitative analysis align with NIST's community-driven approach?

Answer: AI qualitative analysis speeds synthesis without replacing human interpretation.

Nist.gov emphasizes community-developed guidance, and AI-enabled tools like Evidano can surface themes and evidence quickly so community contributors can spend more time validating and prioritizing recommendations rather than manually organizing data.

Conclusion & Next Steps

Nist.gov's August 17, 2026 concept paper opens a timely window to shape human-centered cybersecurity guidelines with feedback due by September 30, 2026.

Research and UX teams should shift focus from training-only interventions to usability, workload, and organizational culture measures as Nist.gov recommends.

Evidano helps teams collect, transcribe, analyze, and visualize stakeholder evidence so researchers can produce concise, evidence-backed input for NIST and for internal guideline development.

If you want to analyze stakeholder interviews and prepare structured recommendations at speed, Try Evidano for free.

Topics

human-centered cybersecurity research
qualitative cybersecurity research
human-centered security guidelines
security UX research

Keep reading

Browse all articles