The human factor in cybercrime and cybersecurity

With the digitization of society, crime has also digitized. Digitization has consequences for the entire spectrum of crime and raises all sorts of questions. For example, are we dealing with a new type of offender, or with the same old offenders who simply moved their activities online? How can potential victims be made resilient against attacks? And who should protect potential victims: the police, commercial cybersecurity companies, or internet service providers? To date, many of these questions remain unanswered. This is partly because current studies have a strong focus on technology or are exploratory in nature, suffer from methodological limitations and focus on just a few of the many types of cybercrime. The aim of this research agenda is to stimulate research on the human factor in cybercrime and cybersecurity. The agenda provides the state-of-the-art of research on the role of the human factor in this fi eld. In addition, examples are given of important research questions and innovative methods and datasets that are needed for future studies. This agenda can be seen as a foundation for further thought with disciplines, inside and outside the social sciences, about how these topics and questions can best be answered.