With the digitization of society, crime has also digitized. Digitization has consequences for the entire spectrumof crime and raises all sorts of questions. For example, are we dealing with a new type of offender, or with thesame old offenders who simply moved their activities online? How_can potential victims be made resilientagainst attacks? And who should protect potential victims: the_police, commercial cybersecurity companies, or_internet service providers?To date, many of these questions remain unanswered. This is partly because current studies have a strong focuson technology or are exploratory in nature, suffer from methodological limitations and focus on just a few of the many types of cybercrime. The aim of this research agenda is to stimulate research on the human factor in cybercrime and cybersecurity. The agenda provides the state-of-the-art of research on the role of the human factor in this fi eld. In addition, examples are given of important research questions and innovative methods and datasets that are needed for future studies. This agenda can be seen as a foundation for further thought with disciplines, inside and outside the social sciences, about how these topics and questions can best be_answered.