Socio-technical systems are next generation information systems, where people are not anymore considered as mere users, but as an active part of the systems. In these systems people closely collaborate with the technical part to achieve their objectives and provide services. For example, in a socio-technical system as an airport, tower control personnel and flights control systems collaborate to deliver air traffic control services. Such a shift deeply impacted how information systems are designed especially for security and privacy: two essential characteristics that were reframed when people took such a central role. This course will first introduce socio-technical systems, privacy and security concepts. Then it will present model driven approaches to design social, organizational and technical aspects of security and privacy for socio-technical systems.