Cybersecurity Strategy Research Articles

THE IMPACT OF CYBERSECURITY BREACHES ON BIG BUSINESSES

This paper explores the significant impact of cybersecurity breaches on large businesses, focusing on financial losses, operational disruptions, reputational damage, and legal challenges. It examines key breach types such as data theft, ransomware, and phishing, and highlights the increasing complexity of cyber threats due to emerging technologies like AI, IoT, and 5G. Case studies, including Target and Equifax, demonstrate the long-term consequences of breaches. The paper emphasises the importance of proactive cybersecurity strategies, leadership involvement, and continuous adaptation to evolving threats. In conclusion, it underscores the need for businesses to invest in robust cybersecurity measures to protect assets, maintain consumer trust, and ensure long-term resilience in an increasingly digital world.

The role of data governance in enhancing cybersecurity resilience for global enterprises

Data governance plays a critical role in enhancing cybersecurity resilience for global enterprises. In the face of increasingly sophisticated cyber threats, coupled with rising regulatory demands such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), enterprises must implement robust data governance frameworks to safeguard data integrity, availability, and confidentiality (Ramirez et al., 2008). Effective data governance involves a combination of policies, procedures, and technologies that align with an organization’s overall cybersecurity strategy (Khatri & Brown, 2010). This paper provides a comprehensive analysis of the critical intersection between data governance and cybersecurity, emphasizing the link between governance structures, risk management processes, and technological innovations in mitigating evolving cyber threats (Weber et al., 2009). Additionally, we explore the essential role of data stewardship, stakeholder responsibilities, and the deployment of advanced technologies, such as artificial intelligence (AI) and machine learning (ML), in fostering organizational resilience (Arora & Pedersen, 2017). Through case studies and best practices, the study presents a conceptual framework that enables global enterprises to adapt to the fast-changing cybersecurity landscape while maintaining compliance with international data regulations. By addressing key elements such as access control, data classification, and real-time monitoring, this research underscores how comprehensive data governance frameworks serve as a foundation for enhanced cybersecurity resilience in today’s digital economy (Da Veiga & Eloff, 2007).

Cybersecurity and the Future of International Relations

This research examines the growing influence of cybersecurity on international relations, focusing on how cyber threats, digital espionage, and cyber warfare are transforming state sovereignty, diplomacy, and global security. With the rise of state-sponsored cyberattacks and the increasing involvement of non-state actors, cybersecurity has become a central issue in the global power dynamics between major nation-states and international organizations. The study analyzes high-profile cyber incidents, such as the SolarWinds and Stuxnet attacks, and investigates their geopolitical implications, including how they have reshaped cyber norms and governance strategies. Through a comparative analysis of national cybersecurity strategies in countries like the U.S., China, and the EU, this research assesses the effectiveness of current international treaties, such as the Budapest Convention on Cybercrime, and multilateral efforts to establish cybersecurity norms. Preliminary findings suggest that cybersecurity has evolved into a strategic tool in global competition, with cyberattacks being used for coercion and disruption. Moreover, the rise of cyber espionage has heightened the stakes in digital diplomacy, leading to the establishment of specialized cyber units within foreign ministries. This study advocates for the development of comprehensive international treaties focused on cyber governance, with an emphasis on conflict prevention, cyber deterrence, and collective defense mechanisms. Additionally, it calls for greater involvement of multilateral organizations, such as the United Nations and NATO, in creating transparent and accountable frameworks for state-sponsored cyber activities. The research underscores the urgent need for cohesive global governance models to address the complex challenges posed by cybersecurity in shaping the future of international relations.

An Overview of AI Applications in Cybersecurity for IT Management

Background: Cybersecurity serves as a defense mechanism against unauthorized access, theft, information disclosure, and service disruptions for electronic data, networks, and computer systems. Traditional cybersecurity strategies have struggled to counter increasingly sophisticated and automated cyberattacks, necessitating the exploration of advanced solutions such as artificial intelligence (AI). Aim: This research aims to highlight the role of AI technology and systems in enhancing cybersecurity measures, addressing how AI-based solutions can defend against cyber threats and identifying the associated challenges and future research directions. Methodology: A systematic literature review was conducted, focusing on recent advancements in AI applications for cybersecurity. Key databases and search engines were utilized to gather relevant articles, which were then filtered based on criteria such as language, publication quality, citation count, and accessibility. The collected literature was analyzed to extract insights on AI methods and their uses in cybersecurity. Results: The study found that AI offers several benefits in addressing cybersecurity concerns. AI systems can identify novel and complex cyber threats, handle substantial volumes of security data, and establish baselines for normal network behavior to detect deviations. Various AI techniques, including neural networks, expert systems, intelligent agents, and machine learning, were identified as effective tools in combating cyber threats. AI has demonstrated significant improvements in the detection and prevention of cyberattacks, enhancing overall cybersecurity effectiveness. Findings: While AI enhances cybersecurity capabilities, it also introduces new challenges such as the need for substantial data and resources, managing false alarms, and vulnerability to adversarial attacks. The study underscores the importance of continuous research to develop robust AI systems that can adapt to evolving cyber threats. Future research should focus on addressing the limitations of AI in cybersecurity, including adversarial threats, data integrity, and human-machine collaboration.

Assessment of Cybersecurity Risks in Digital Twin Deployments in Smart Cities

Digital Twin (DT) technology has become a cornerstone of modern smart city infrastructure, providing real-time insights and operational efficiencies by creating a virtual replica of physical systems such as traffic networks, energy grids, and public services. While these advancements enable optimized urban management and improved decision-making, they also present new cybersecurity challenges that can potentially jeopardize the safety and reliability of critical infrastructures. This study addresses the cybersecurity risks associated with Digital Twin deployments in smart cities, focusing on threats such as unauthorized access, data manipulation, and hijacking of the DT models, which could result in service disruptions and compromise public safety. The research employs a comprehensive risk assessment methodology based on the NIST Cybersecurity Framework, where potential risks are identified, evaluated, and prioritized according to their severity and likelihood of occurrence. To mitigate these risks, a multi-layered security framework was developed, incorporating encryption mechanisms, robust access control, and an Artificial Immune System (AIS)-based anomaly detection model. The framework was tested through a simulated case study on a smart transportation system within a smart city environment, demonstrating its effectiveness in preventing data tampering and detecting unauthorized access. The results indicate that the proposed security model reduced data manipulation incidents by 35%, decreased response times for threat detection by 25%, and improved overall system resilience by 40%. These findings underscore the critical need for proactive cybersecurity strategies in ensuring the secure and resilient deployment of Digital Twin technologies in smart cities. The study concludes by emphasizing the importance of continuous security monitoring and adaptive threat management to safeguard smart city ecosystems from evolving cyber threats

Planning and Preparation of Cybersecurity

In today's digital environment characterized by fast-evolving adversaries, expanded attack surfaces, and complex IT environments, having a formidable plan and being prepared could create a world of difference when faced with a potential cyber-attack. Cyber threats are growing risks to everyone and any institution. Cybercriminals target individuals and companies of all sizes. Today's attacks are agile and sophisticated. Ransom demands are elevating and advancing rapidly while attackers drill down their focus to specific victims like critical infrastructure businesses, which can spend millions of dollars in losses from cyber disasters since such companies have less tolerance for downtime. The evolution of artificial intelligence technology, which is more interesting and scarier at the same time, is impacting the field of cybersecurity. The negative side of AI is that it has enabled threat actors to blend new data theft-based extortion techniques into ransomware. Attackers can steal companies' sensitive data or even encrypt the data and demand ransom for the decryption key failure, to which they threaten the company to expose the data to the public or even trade in the dark web. The intelligent techniques and tactics utilized by threat actors are a clarion call for organizations to proactively plan and prepare adequately by developing a cybersecurity strategy as a countermeasure. A cybersecurity strategy is a comprehensive plan that stipulates an organizational approach to secure its IT infrastructure against cyber threats. The common cybersecurity strategy various organizations use to plan and prepare for inevitable attacks is the incidence response plan. Incidence response is the processes and technologies organizations use to detect and respond to cyber threats, security breaches, or cyberattacks within an organization. Developing and implementing a formal incident response plan allows organizations to minimize and prevent damage. This research paper focuses on the primary goal of the incident response of preventing cyberattacks prior to occurring and reducing the cost and business disruption emanating from cyberattacks that happen. Keywords – incident response, threats, Artificial intelligence, cybersecurity, threat attacks, plan, preparation.

Keamanan siber sebagai fondasi pengembangan aplikasi keuangan mobile: Studi literatur mengenai cybercrime dan mitigasinya

This study examines the importance of cybersecurity in mobile financial applications, particularly in the face of rising cybercrime threats. The aim of this research is to provide deeper insights into the significance of cybersecurity in mobile financial apps and to develop approaches that financial companies can adopt to protect their users' data and information. The research employs a qualitative descriptive method using a systematic literature review (SLR) approach. Meta-synthesis analysis is applied to synthesize data from 26 journal articles published between 2019 and 2024. The findings reveal that cybercrime in the financial and FinTech industries is driven by internal factors such as weak security systems, lack of system updates, limited human resource competencies, and careless user behavior. External factors include malware attacks, unclear regulations, and the use of advanced technology. To counter these, it is necessary to implement technologies such as firewalls and blockchain, strong risk management, enhanced network infrastructure, the establishment of cybersecurity teams, the development of clear regulations, and user education to raise awareness and improve cybersecurity. Therefore, the implementation of a comprehensive cybersecurity strategy is crucial in maintaining the integrity and trust of users in mobile financial applications.

A Novel Hybrid Intrusion Detection Framework Leveraging Machine Learning and Flower Pollination Optimization

The exponential growth in technologies such as cloud computing, smart devices, virtualization, and the Internet of Things (IoT) has generated over four hundred zettabytes of network traffic data annually. This surge necessitates robust cybersecurity strategies to protect information from intrusions, which can result in significant financial losses. Reducing security risks requires the use of data analytics and machine learning to derive insights and make informed decisions based on network data. This study introduces the Flower Pollination Optimization (FPO) algorithm for feature selection to enhance the performance of several classifiers on the UNSW-NB15 dataset. We evaluated four classifiers: Linear Discriminant Analysis (LDA), Multi-Layer Perceptron (MLP), Quadratic Discriminant Analysis (QDA), and K-Nearest Neighbors (KNN) in two scenarios: without feature selection and with FPO-based feature selection. The results demonstrate significant improvements in classifier performance with FPO, with QDA achieving the highest accuracy of 99.16%. Comparative analysis with recent studies highlights the superior performance of our approach, setting a new benchmark in intrusion detection. This research underscores the essential role of effective feature selection in improving the accuracy and reliability of Intrusion Detection Systems (IDS), particularly in IoT environments.

Development of Detection and Mitigation of Advanced Persistent Threats Using Artificial Intelligence and Multi-Layer Security on Cloud Computing Infrastructure

This research proposes a novel approach for detecting and mitigating Advanced Persistent Threats (APTs) in cloud computing infrastruc ture, offering more comprehensive protection compared to previous methods. By integrating detection and mitigation, this study addresses the shortcomings of prior research that focused solely on detection. Based on the conducted research, Artificial Intelligence (AI) detected Cross-Site Scripting (XSS) attacks with an accuracy of 0.9951, SQL Injection (SQLI) at 0.9964, and Remote Code Execution (RCE) at 0.9876. In trials against new attacks, the detection success rates reached 70% for XSS, 98% for SQLI, and 100% for RCE. During the deployment phase, the system successfully identified 23.040 out of 108.394 requests as XSS attacks, 2.684 out of 128.750 as SQLI attacks, and 1.135 out of 46.450 as RCE attacks. The detection and mitigation methods were directly tested on cloud server experiencing APT attacks. The daily attacks on the server reached 1.980, with 663.000 requests. Additionally, the number of attacks directed at authentication or sensitive pages reached 17.913.701. Attack mitigation was tested through seven layers of security, including DNS Protection, Config Server Firewall (CSF), OWASP ModSecurity, HTTP middleware, data filter or sanitizer, template engine, and manual mitigation successfully blocking million of persistent attacks. The DNS protection layer successfully mitigated 59,000 out of a total of 19 million requests. The CSF layer mitigated 173 sources IP of DDoS attacks. The ModSecurity layer mitigated 17,916,204 attacks. All attacks were successfully mitigated before reaching the HTTP Middleware stage or next layer. The use of NIST 2.0 standards helps manage security risks through identification, protection, detection, response, and recovery. Test results indicate that this multi-layered system is more efficient and effective in detecting and mitigating attacks compared to traditional methods. However, the complexity of implementation and maintenance poses challenges that must be addressed. This research significantly contributes to a more adaptive and sustainable cybersecurity strategy.

Middle powers and minilateralism against hybrid threats in the Indo-Pacific: South Korea, Singapore, and Taiwan

ABSTRACT Asian middle powers are adopting strategies to address emerging hybrid warfare threats by building a web of partnerships with capable and advanced states. This shows an inflection point in the foreign behaviours of Asian states, which have been largely regarded as hedgers between the US and China. To demonstrate the relationship between hybrid threats and complex alignment, this study focuses on three second-tier Indo-Pacific states: South Korea, Singapore, and Taiwan. South Korea has opened a new era of the trilateral relationship with the US and Japan, and has released its revised cybersecurity strategy emphasising liberal international cooperation against North Korea’s and other hybrid threats, while deepening its cyber and technology cooperation with like-minded states. Singapore has sought to further develop its relationship with the US, whilst maintaining ties with Taiwan; such an arrangement provides an opportunity for the two countries to promote joint leadership to support minilateral efforts in countering Chinese hybrid warfare threats. Over the past two decades, minilateral cooperation has become increasingly popular among Asian states that are implementing institutional balancing against the newly emerging threats.

The Role of Internet of Battlefield Things in Modern Warfare: A Cybersecurity Perspective

The Internet of Battlefield Things (IoBT) is revolutionizing military operations by integrating interconnected devices and autonomous systems into combat environments, significantly enhancing decision-making, communication, and battlefield efficiency. However, this reliance on IoBT introduces substantial cybersecurity risks, exposing military networks to sophisticated cyber threats such as hacking, malware, and Distributed Denial of Service (DDoS) attacks. This paper explores the interplay between IoBT and the cyber domain, identifying the key challenges, vulnerabilities, and solutions necessary to secure these interconnected systems in the context of modern warfare. The study reviews the architectural components of IoBT, including sensors, drones, and communication networks, and examines their potential weaknesses in the face of cyberattacks. Additionally, it discusses common attack vectors such as Man-in-the-Middle (MitM) and zero-day exploits, which pose significant risks to military systems. To counter these threats, the paper evaluates various cybersecurity strategies, including the application of artificial intelligence (AI), machine learning (ML), blockchain technology, and robust encryption protocols designed to enhance the resilience and security of IoBT networks. Case studies of real-world IoBT deployments and cyber breaches further illustrate the practical implications of these challenges and defense mechanisms.

Cybersecurity in Healthcare: Securing Patient Health Information (PHI), HIPPA compliance framework and the responsibilities of healthcare providers.

Healthcare industry is major target for cyberattacks, making the protection of public health information (PHI) and Personal Identifiable Information (PII) a prime issue. In this digital era, with health organizations shifting to electronic health records and telemedicine, they are facing a major cybersecurity attack such as ransomware, phishing, and data breaches. These attacks compromise patient privacy, pose serious risks to patient safety, and hinder healthcare operations. The Health Insurance Portability and Accountability Act (HIPAA) provides a comprehensive compliance framework to protect PHI, wherein health providers shall undertake administrative, physical and technical safeguards. Despite these regulations, many healthcare providers struggle with achieving and maintaining HIPAA compliance due to limited resources, outdated technologies, and the rapidly evolving nature of cyber threats. This paper explores the HIPAA compliance framework, examining the specific responsibilities of healthcare providers to secure PHI. Key measures taken include periodic analysis of risks, establishment of encryption and access control systems, and comprehensive employee training to minimize risks of cyber-attacks. The study highlights that there is a growing need for healthcare providers to adopt proactive, adaptive cybersecurity strategies to deal with emerging threats. By following HIPAA regulations and updating security practices continuously, healthcare providers can protect the PHI, ensure regulatory compliance and safeguarding patient trust. The findings emphasize the role of adhering to regulation and innovation both in managing cyber risks for the healthcare sector.

NOVEL STUDY ON ETHICAL HACKING AND VULNERABILITY TESTING

Ethical hacking and vulnerability testing represent critical components of modern cybersecurity strategies, aimed at proactively identifying and mitigating potential security threats within organizational systems and networks. Ethical hacking, also known as penetration testing, involves authorized attempts to exploit vulnerabilities in systems, applications, or networks, mirroring the tactics of malicious actors. This proactive approach allows organizations to uncover weaknesses before they are exploited by cybercriminals, thereby strengthening overall security posture. Vulnerability testing complements ethical hacking by systematically assessing systems for known vulnerabilities and configuration errors, providing insights into areas requiring remediation. Together, these practices enable organizations to assess, prioritize, and address security risks effectively, safeguarding sensitive data, maintaining regulatory compliance, and preserving business continuity. This article explores the principles, methodologies, and benefits of ethical hacking and vulnerability testing, emphasizing their role in enhancing cybersecurity resilience in an increasingly interconnected digital landscape. Keywords: Cybersecurity, Ethical Hacking, Mitigation, Networks, Penetration Testing, Security Threats, Systems, Testing, Vulnerabilities.

Organizational Environment, Protection Motives, Adoption of Machine Learning, and Cybersecurity Behavior

The research presented in this intensive study uncovers the complex interaction between organizational and individual drivers affecting cybersecurity behavior within organizations. Its major focus is analyzing the impact of organizational policies and culture, training, and awareness programs on the cybersecurity conduct of employees. This paper also examines self-protective behavior related to risk perception, perceived self-efficiency, and response efficacy, which explains how these variables may influence self-protective behaviors. According to the Protection Motivation Theory (PMT), the study unravels how individuals' different elements of threat appraisal, coping appraisal, and cost-benefit analysis contribute to their decisions to apply cybersecurity behaviors. It also underlines that machine learning is being used more and more in cybersecurity and demonstrates some important ML concepts in modern cybersecurity, such as picking up the right data to train with, coping with adversarial attacks, and, last but not least, making the models interpretable. Ultimately, having a comprehensive understanding of these cybersecurity behaviors may shed new light on mechanisms that can be used to develop cybersecurity strategies and technologies to help protect against the rapidly changing landscape of cyber threats. All research papers have an abstract. It can be created by simply compiling the main points (summary) of each section of the research paper.

Comprehensive review of smart city cybersecurity strategies

With cities rapidly advancing technologically, the rise of smart cities brings innovative solutions to urban challenges. However, this integration of technologies within urban infrastructures introduces new cybersecurity risks. This review explores the cybersecurity issues that smart cities face and discusses strategies to address these threats. Smart cities rely on interconnected networks of devices and systems to enhance efficiency, sustainability, and citizen services. Yet, this connectivity also creates a complex environment that is vulnerable to cyberattacks. A key concern is the wide array of IoT devices deployed across smart city infrastructures, which often lack robust security mechanisms, making them susceptible to exploitation by cybercriminals. The interconnected nature of these systems heightens the potential impact of cyberattacks, posing significant risks to critical infrastructure, public safety, and privacy. Threat actors can exploit vulnerabilities in interconnected systems, disrupting essential services, manipulating data, or even causing physical harm. Since smart cities heavily depend on data-driven decision-making, ensuring data integrity and confidentiality is a top priority. To mitigate these risks, various cybersecurity strategies have been proposed and implemented. These include technical solutions, regulatory frameworks, and collaboration among stakeholders. Technical measures like encryption, authentication mechanisms, intrusion detection systems, and secure software development practices are essential. Additionally, strong access controls and network segmentation can limit the scope of potential attacks. Regulatory initiatives also play a crucial role in improving cybersecurity standards and ensuring compliance among stakeholders. Establishing clear guidelines for data protection, privacy rights, and incident response protocols is vital for safeguarding citizens' interests. Collaborative efforts between government agencies, the private sector, academia, and cybersecurity experts are crucial in sharing information and collectively defending against emerging threats. Securing smart cities requires a comprehensive approach that integrates technical measures, regulatory frameworks, and collaborative efforts to create a resilient and secure urban environment for all citizens. Keywords: Cybersecurity, Smart City, AI, Technology, Security.

Employee Awareness and Attitudes Towards Cybersecurity Technologies

This study explores employee awareness and attitudes towards cybersecurity technologies. As organizations strive to improve their cybersecurity measures, the human element remains a critical yet often overlooked factor. This research investigates the correlation between employee awareness and the adoption of emerging cybersecurity technologies, the impact of these technologies on cybersecurity incident rates, and the relationship between employee satisfaction and cybersecurity awareness. A qualitative exploration approach was employed, utilizing data from peer-reviewed publications, technology conference proceedings, and industry reports. Surveys of cybersecurity experts and organizational executives were conducted to identify recurring themes and concerns. The findings reveal that increased employee awareness significantly enhances the effectiveness of cybersecurity measures and reduces security incidents. Furthermore, the study highlights the necessity of continuous training and education for employees to maintain a robust cybersecurity posture. The research also emphasizes the importance of integrating cybersecurity technologies into daily operations to enhance their efficacy. This comprehensive examination aims to assist organizations in developing resilient cybersecurity strategies that address both technological and human factors.

The Missing Engineering Discipline in Cybersecurity: Human Factors Engineering

Human factors remain the most critical vulnerability in cybersecurity, with many breaches involving human errors or social engineering. Integrating human factors engineering (HFE) into cybersecurity strategies is crucial for addressing these vulnerabilities and enhancing security resilience. Despite its importance, HFE is not widely recognized as an engineering discipline in cybersecurity, and many educational programs lack dedicated courses on human factors. Academic institutions, cybersecurity professionals, and federal agencies must advocate for incorporating HFE into cybersecurity curricula to prepare professionals with a comprehensive understanding of human behavior and its impact on security, ultimately leading to more robust and resilient cybersecurity practices.

Artificial Intelligence and Machine Learning in Healthcare Cybersecurity of Current Applications and Future Directions

Data communication has increased due to the growth of technology-driven services and application deployment. Because there are always security risks to networks, the increasing throughput of networks has also increased the likelihood of cybercrimes. Additionally, the abrupt end of the COVID crisis, which caused nearly all services to go online, has increased awareness of the threat posed by cyberattacks in general. Thus, in the information and technology-driven world of today, reliable communication is crucial. The network is frequently discovered to be vulnerable to a variety of network attacks, such as spoofing, malware, and DDoS attacks. The difficulties caused by intrusions have also been covered in the current work, along with the methods to prevent and detect these kinds of intrusion attempts that have been under investigation for the past few years. Research needs have been identified by presenting and analysing the body of literature currently available on IDS. A hybrid approach has been suggested based on the information to provide a secure communication mechanism and protect the network from intruders. A cyber security strategy based on ABC and 3D CNN architecture is suggested as a solution to this. The qualities that reflect malware and DDoS attack aspects are chosen and optimised using the ABC. Neural networks are trained and classified using the retrieved data. The accuracy, recall, and f-measure analysis of the suggested cyber security method for malware and DDoS node detection were assessed. Comparative investigation demonstrated that the cyber security method was more effective at identifying network attacks.

Review on the application of data security in the enterprise management

In recent decades, cybersecurity has become a crucial topic in business management, centred around the three core elements of Confidentiality, Integrity, and Availability (C.I.A.) of information technology. Cybersecurity aims to protect IT systems and networks from cyberattacks, with data as the primary focus. In business management, strategies for addressing potential threats vary depending on the size and type of business. This writing explores the preferences for implementing cybersecurity strategies in business management and trends in the development of data security mitigation. It analyses the mitigation strategies adopted by different enterprises, identifies patterns between data security strategies and enterprise attributes, and examines the preferences and constraints faced by enterprises in developing cybersecurity programs. The study highlights trends in the implementation of data security strategies, emphasizes the importance of cybersecurity, and provides insights into future trends in digital security within enterprise management and development. It also addresses the challenges faced by businesses, particularly small and medium-sized enterprises, in implementing effective cybersecurity measures due to limited resources.

Understanding the Root Cause of Cybersecurity Incidents Through DuPont’s Dirty Dozen Framework

Cybersecurity incidents, such as data breaches, pose a significant threat to organisations. Shockingly, 95% of these incidents occur due to human errors. Despite organisations making substantial efforts to reduce the likelihood of such occurrences through technological and non-technological means, the frequency of these incidents has been increasing. Previously, organisations relied on technology as the primary barrier to minimise cybersecurity incidents and achieve their objectives. Although research indicates that humans are the weakest link in an organisation's efforts to combat cybersecurity incidents, organisations still consider technology as the key to improving security defences. Therefore, the researchers suggest improving human interventions should precede technological means to overcome the problem. They propose that existing information security plans should consider human factors in cybersecurity risk management. Prioritising an understanding of human factors in managing information security can help organisations identify the relationships between various dimensions of human errors and cybersecurity incidents. To achieve this, the paper suggests solving the human factor problem in cybersecurity incidents by explaining how DuPont's Dirty Dozen framework, commonly used in aviation, can help understand why cybersecurity incidents and accidents occur. The framework lists twelve human behaviours that can be used to understand the relationships between various dimensions of human errors and cybersecurity incidents. By understanding these relationships, organisations can improve their cybersecurity strategies by anticipating, mitigating, and resolving issues more effectively and efficiently.