What are the seven dimensions of security?

The Seven Dimensions of Security: A Human-Centered Approach

Security isn’t just about firewalls and passwords—it’s deeply tied to people. While technology plays a key role, human factors often determine whether a system stays protected or becomes vulnerable. That’s where the seven dimensions of security come in: attitudes, behaviors, cognition, communication, compliance, norms, and responsibilities. Together, they form a holistic model that moves beyond technical safeguards to address the cultural and psychological aspects of security.

Attitudes shape how seriously individuals take security. A dismissive mindset can undermine even the strongest defenses. Closely linked are behaviors—the daily actions, like clicking links or reusing passwords, that either strengthen or weaken security. Underlying these behaviors is cognition: how people perceive threats, assess risks, and make decisions under pressure.

Clear communication is essential. If security policies aren’t explained effectively, people can’t follow them. This ties into compliance, not as blind rule-following, but as a shared commitment upheld through consistent messaging and support. Over time, compliant actions become embedded in organizational norms—the unwritten rules that guide behavior. In a strong security culture, locking computers or reporting phishing attempts becomes second nature, not an exception.

Finally, responsibilities define who does what. Clarity here prevents gaps in coverage and fosters accountability. When everyone understands their role—whether you're in IT or accounting—the entire organization becomes more resilient.

This model reminds us that security is not a checklist. It's a continuous process shaped by human dynamics. Investing in awareness, fostering trust, and aligning expectations across all seven dimensions creates an environment where security works not just in theory, but in practice—every single day.