Conference on
Sociotechnical Cybersecurity and Privacy
(SCP2026)

Contemporary digital infrastructures are inherently sociotechnical systems. Security and privacy outcomes arise from the interaction between technologies, people, and organizational contexts. Technical mechanisms alone cannot fully address security challenges, just as focusing solely on human behavior overlooks the crucial role of system design. Effective solutions therefore require integrating both perspectives.

The Conference on Sociotechnical Cybersecurity and Privacy (SCP) is a new conference that emerged by combining two successful events in socio-technical, user-centric privacy and security: EuroUSEC (European Symposium on Usable Security) and STAST (International Workshop on Socio-Technical Aspects in Security). It aims to bring together researchers and practitioners from diverse backgrounds — including computer science, engineering, psychology, the social sciences, and economics — to provide a forum for research and to discuss issues related to human-computer interaction, security, and privacy.

Research in usable security and human-centered cybersecurity has increasingly challenged the long-standing notion that humans are the "weakest link", still this is an opinion that persists, overcoming that many security failures stem from technologies designed without adequately considering human capabilities, practices, and constraints. In practice, successful attacks frequently exploit both technical vulnerabilities and human factors - including poorly designed interfaces, unclear security policies, and misaligned user incentives.

SCP promotes research that treats people as integral components of systems and services exploring how technology and human behavior can be jointly designed to support effective, usable, and trustworthy security and privacy.