Information security has emerged as main domain in the information systems research community. However, with the rise of user-centred security a branch of information security which deals with security controls or mechanisms that have usability at it central core, it has become imperative especially with the increasing rise in cybercrime that this aspect be taken a keen look at. Although there has been several research in user-centred security, few have viewed the subject from the perspective of perceived affordance. This research investigates the relationship between this construct and user-centred security and develops a model that explicates the concept of user-centred security. This research situated in the interpretivist paradigm inductively draws knowledge from literature and data to develop this model.