Defining Cybersecurity Shouldering

Understanding Shouldering

Shouldering is a cybersecurity concept that describes how security boundaries or responsibilities can be carried, leveraged, or transferred by actors within a system to gain unauthorized advantage or bypass protective controls. The term draws from the idea of “shouldering” a burden, implying that security is not a fixed barrier but a responsibility that can be misapplied, delegated, or exploited over time. Unlike shoulder surfing, which involves directly observing someone entering sensitive information, shouldering encompasses structural and behavioral dynamics that allow privileges or trust to be moved or misused.