About the Human Security Open Framework

HSOF is a collaborative movement to define and share human-focused cybersecurity best practices from onboarding to offboarding, from daily habits to crisis response.

Why a human security framework?

• People are often the first line of defense when they are informed and empowered: identifying suspicious behavior, spotting fraud, raising alerts, and protecting sensitive data.
• Most existing frameworks prioritize machines, networks, and systems but overlook human behavior, culture, and everyday practices where risks (and opportunities) start.
• Whether it's an HR assistant, a finance controller, or a project lead, every team member plays a vital role in the organization's resilience.
• By investing in awareness, responsibility, and cross-functional collaboration, we turn people into active security allies — not passive vulnerabilities.

Why open?

Security isn't just about defending systems, it's about empowering people.
We the People... are the first line of defense.

• We believe human-centric security is a shared responsibility. Its practices should be free, transparent, and accessible to all.
• This framework is fully open-source. Anyone can use it, improve it, or adapt it to their own context. Forever.
• We welcome contributors from every field (cybersecurity, HR, legal, finance, education...) because human security spans the whole organization.
• A public contributor wall (coming soon) will highlight those who support the movement — big or small.
• Openness builds trust. And trust is the foundation of secure teams, workplaces, and societies.