Human Factors In Cybersecurity Research Articles

Building Cybersecurity Capacities in Zambia’s Business Sector: Guideline for SMEs

This research explores cybersecurity awareness and implementation within Zambia’s small and medium-sized enterprises (SMEs), a sector increasingly targeted by cyberattacks that lead to substantial financial losses. The study’s primary aim was to enhance cyber awareness and develop actionable guidelines for SMEs in Zambia. Utilising an interpretivist philosophy and inductive approach, the methodology encompassed semi-structured interviews, cross-sectional analysis, and a comprehensive review of CISA, ENISA guidelines, and Zambia’s Data Protection Act. Findings indicate a notable deficit in cybersecurity training and awareness among SMEs. Key concerns include inadequate data security measures, a lack of formal cybersecurity policies, and a reliance on basic tools like antivirus software. In response, the study formulated targeted guidelines, emphasising the integration of cyber awareness into SME governance and risk management. These guidelines have garnered significant interest from Zambian government entities, highlighting their potential influence on national cybersecurity policy. The study contributes theoretically by contextualising international cybersecurity standards within Zambia’s unique SME landscape. Methodologically, it pioneers a Cyber Awareness Framework tailored to Zambian SMEs, underscoring the critical role of human factors in cybersecurity. Practically, the research has sparked engagement among SMEs and government bodies, demonstrating its applicability and potential for shaping policy. However, limitations include reliance on outdated demographic data and a focus on digitally enabled SMEs, potentially overlooking broader IT governance aspects and less digitized businesses. Future research should aim for comprehensive, up-to-date analysis across all SME sectors, contributing to a more inclusive and resilient cybersecurity landscape in Zambia.

A critical review of emerging cybersecurity threats in financial technologies

The rapid evolution of financial technologies (FinTech) has revolutionized the financial landscape, providing unprecedented convenience and efficiency. However, this technological advancement has also exposed the financial sector to an escalating array of cybersecurity threats. This paper presents a critical review of emerging cybersecurity threats in FinTech, analyzing the challenges and vulnerabilities faced by financial institutions in an era of increasing digitalization. The study delves into the complex landscape of cyber threats, exploring the spectrum from traditional threats, such as phishing and malware attacks, to sophisticated and evolving threats like ransomware, supply chain attacks, and artificial intelligence-driven cyber threats. The analysis highlights the interconnectedness of FinTech platforms, making them susceptible to systemic risks and cascading failures. Furthermore, the paper evaluates the impact of regulatory frameworks and compliance measures on mitigating cybersecurity risks in the FinTech domain. It assesses the effectiveness of current strategies and suggests potential enhancements to address the dynamic nature of cyber threats. A significant portion of the review focuses on the role of human factors in cybersecurity, emphasizing the need for robust training and awareness programs to empower financial professionals and users alike. Social engineering attacks, insider threats, and the exploitation of human vulnerabilities are discussed in detail, underscoring the importance of a holistic approach to cybersecurity. This critical review aims to provide a comprehensive understanding of the emerging cybersecurity landscape in FinTech. By shedding light on the evolving threats and vulnerabilities, the paper contributes to the ongoing discourse on safeguarding the integrity and security of financial technologies. As the financial industry continues to embrace technological innovations, a proactive and adaptive cybersecurity strategy is imperative to ensure the resilience of the financial ecosystem in the face of evolving cyber threats.

Human factors in cybersecurity: Navigating the fintech landscape

The dynamic landscape of financial technology (Fintech) introduces a myriad of challenges and opportunities, with human factors playing a pivotal role in shaping the cybersecurity ecosystem within this domain. This review explores the intricate relationship between human factors and cybersecurity in the context of Fintech, aiming to navigate the evolving landscape. In the realm of Fintech, where the fusion of finance and technology is reshaping traditional banking and investment practices, understanding human behavior becomes paramount. Human factors encompass a spectrum of elements, including cognitive abilities, decision-making processes, and user behaviors, all of which significantly impact the effectiveness of cybersecurity measures. This paper delves into the nuances of these factors and their implications for securing financial transactions and sensitive data in Fintech platforms. One key aspect of human factors in Fintech cybersecurity is the user interface design. Intuitive and user-friendly interfaces enhance security by minimizing human errors and fostering a secure user experience. Conversely, poorly designed interfaces can inadvertently contribute to vulnerabilities. This paper explores the intersection of user experience design and cybersecurity protocols, aiming to strike a balance that promotes both usability and security. Moreover, the study investigates the psychological aspects of cybersecurity awareness and education in the Fintech sector. As financial transactions increasingly migrate to digital platforms, users' awareness of potential cyber threats becomes a critical line of defense. Analyzing the effectiveness of training programs and awareness campaigns, the paper explores strategies to enhance cybersecurity consciousness among Fintech users. The research illuminates the symbiotic relationship between human factors and cybersecurity within the dynamic Fintech landscape. By comprehensively understanding and addressing human elements in interface design, user awareness, and decision-making processes, the paper aims to provide insights that contribute to the development of robust cybersecurity frameworks tailored to the evolving needs of Fintech platforms.

Human factors in cybersecurity: an in depth analysis of user centric studies

This study delves into the intricate intersection of human behavior, cognition, and technology within the cybersecurity domain, aiming to enhance our understanding of the human-centric challenges influencing the effectiveness of cybersecurity measures. The primary objective is to unravel the nuanced landscape where human errors persist as a significant contributing factor to security breaches, emphasizing the need for a holistic comprehension of human factors. The study recognizes the evolving nature of work, with an increasing number of individuals operating from home, and the consequential challenges in managing human factors in the digital era. The blurring lines between private and public lives, coupled with the rise of social credit systems, necessitate a thorough examination of key elements intersecting with cybersecurity Employing a systematic literature review, this research methodically identifies, filters, and analyzes pertinent literature concerning human-centric factors in cybersecurity. The systematic approach involves the formulation of specific research questions guiding the study, strategic search plans targeting reputable databases, and meticulous study selection processes based on predefined criteria The study unfolds through a series of interconnected research questions, addressing the impact of human factors on operational efficiency, challenges in the adoption of human-centric approaches, and the ways in which human factors influence strategic decision-making in cybersecurity. The results shed light on the substantial contribution of understanding user behavior and cognitive processes to the development of tailored cybersecurity strategies. Challenges, such as security fatigue and the scarcity of psychology-based professionals, are addressed, advocating for human factors engineering and strategic initiatives to enhance education and training programs. In conclusion, embracing a human-centric paradigm emerges as imperative for organizations striving to fortify their defenses against dynamic and sophisticated cyber threats. Integrating technology with a profound understanding of human factors becomes the cornerstone for shaping a resilient and adaptive cybersecurity future.

Human factors in cybersecurity: Designing an effective cybersecurity education program for healthcare staff.

Leaders who promote cybersecurity education focused on the human factors of cyberattack build a resilient workforce that complements technical protections, reducing organizational risk. Cybersecurity is a priority for information technology teams, relying primarily on technology to protect systems. As technical protections mature, the vulnerability shifts to human factors. Education must focus on the risk presented by humans rather than machines. A human factors-centred education program trains human reaction to threats considering the unique healthcare environment. Leaders may look to industries, like aviation, experiencing similar technical advancement, for education practices based on human factors. This article outlines a cybersecurity education program developed for healthcare, applying strategies adopted from commercial aviation. Four core pillars of training are defined: (1) dynamic education delivery options, (2) social engineering focused simulations, (3) high-risk positions and role-based training, and (4) stakeholder and leadership engagement. The first phase of implementation is analyzed, and lessons learned defined.

An Examination of the Human Factors in Cybersecurity: Future Direction for Nigerian Banks

Information and communication technology has become necessary for conducting business operations and ensuring business survival in Nigerian banks. However, this has come with some encumbrances, as this technology is vulnerable to attacks due to technical or human factors. These human factors have been very challenging for organizations due to their multi-dimensional nature and the fact that humans have been responsible for most cybersecurity incidents. Resolving issues arising from cybersecurity incidents is expensive and time-consuming. Therefore, this study is crucial as it will enable Nigerian banks witnessing increased attacks to take preventive measures and reduce the enormous expenditure required for remediation. This study adopts a literature review approach, reviewing previous studies on human factors in cybersecurity to determine the factors responsible for successful cyber-attacks and their suggested mitigations. The findings categorize these human factors into social engineering, poor information security culture, risky password practices, stress, burnout, and security fatigue. The study presents mitigations but notes that training and cybersecurity awareness are the most common reoccurring pre-emptive actions recommended. This research is significant as very little prior research has been conducted in this area targeted at the Nigerian banking sector. Practically, the findings of this study are expected to point Nigerian banks toward the critical human factors that they need to concentrate on to minimize the success rate of cyber-attacks and reduce the associated costs of recovering from these attacks.

A Comparative Assessment of Human Factors in Cybersecurity: Implications for Cyber Governance

A Comparative Assessment of Human Factors in Cybersecurity: Implications for Cyber Governance

The Economics of Information and Human Factors in Cybersecurity

The Economics of Information and Human Factors in Cybersecurity

Human Factors in Cybersecurity

Technological solutions in the mobile and digital era are becoming more helpful in informing the population, educational systems, monitoring, tracking the individuals, working, and spending time from home. On the other hand, the valuable information within such systems is posed to the risk of breaches at the individual and organizational level. As a result, cyber threats are constantly evolving. Many security incidents and data breaches are associated with the human factor. Respectively, this work highlights the importance of human factors in cybersecurity. Firstly, this article gives a brief overview of the topic and its significance. Then we present the most common risks in the cybersecurity field and their impacts. The third part emphasizes the role of human factors in security and elaborates on the behavioral approaches. Our conclusions are drawn in the last detail. To further our research, we plan to investigate behavioral science theories on understanding the influence of human factors in cybersecurity.

Leveraging human factors in cybersecurity: an integrated methodological approach

Computer and Information Security (CIS) is usually approached adopting a technology-centric viewpoint, where the human components of sociotechnical systems are generally considered as their weakest part, with little consideration for the end users’ cognitive characteristics, needs and motivations. This paper presents a holistic/Human Factors (HF) approach, where the individual, organisational and technological factors are investigated in pilot healthcare organisations to show how HF vulnerabilities may impact on cybersecurity risks. An overview of current challenges in relation to cybersecurity is first provided, followed by the presentation of an integrated top–down and bottom–up methodology using qualitative and quantitative research methods to assess the level of maturity of the pilot organisations with respect to their capability to face and tackle cyber threats and attacks. This approach adopts a user-centred perspective, involving both the organisations’ management and employees, The results show that a better cyber-security culture does not always correspond with more rule compliant behaviour. In addition, conflicts among cybersecurity rules and procedures may trigger human vulnerabilities. In conclusion, the integration of traditional technical solutions with guidelines to enhance CIS systems by leveraging HF in cybersecurity may lead to the adoption of non-technical countermeasures (such as user awareness) for a comprehensive and holistic way to manage cyber security in organisations.

Botching Human Factors in Cybersecurity in Business Organizations

Abstract Human factors remained unexplored and underappreciated in information security. The mounting cyber-attacks, data breaches, and ransomware attacks are a result of human-enabled errors, in fact, 95% of all cyber incidents are human-enabled. Research indicates that existing information security plans do not account for human factors in risk management or auditing. Corporate executives, managers, and cybersecurity professionals rely extensively on technology to avert cybersecurity incidents. Managers fallaciously believe that technology is the key to improving security defenses even though research indicates that new technologies create unintended consequences; nonetheless, technological induced errors are human-enabled. Managers’ current perspective on the human factors problem information security is too narrow in scope and more than a training problem. The management of complex cybersecurity operations accompanied by mounting human factor challenges exceeds the expertise of most information security professionals; yet, managers are reluctant to seek the expertise of human factors specialists, cognitive scientists, and behavioral analysts to implement effective strategies and objectives to reduce human-enabled error in information security.

Human Factors in Cybersecurity – Perspectives from Industries

Today, cybersecurity is impacting every individual and industry, but the level of effort from the human factors community seems negligible compared to the magnitude of the current security challenge. This panel invites professionals in the healthcare, computer and network, higher education, and automotive industries to share experiences, lessons learned and solutions. The panel characterizes the security landscape in different industries and facilitate discussion on human factors research and applications to address the formidable security challenge.

Human factors in cybersecurity; examining the link between Internet addiction, impulsivity, attitudes towards cybersecurity, and risky cybersecurity behaviours

The present study explored the relationship between risky cybersecurity behaviours, attitudes towards cybersecurity in a business environment, Internet addiction, and impulsivity. 538 participants in part-time or full-time employment in the UK completed an online questionnaire, with responses from 515 being used in the data analysis. The survey included an attitude towards cybercrime and cybersecurity in business scale, a measure of impulsivity, Internet addiction and a ‘risky’ cybersecurity behaviours scale. The results demonstrated that Internet addiction was a significant predictor for risky cybersecurity behaviours. A positive attitude towards cybersecurity in business was negatively related to risky cybersecurity behaviours. Finally, the measure of impulsivity revealed that both attentional and motor impulsivity were both significant positive predictors of risky cybersecurity behaviours, with non-planning being a significant negative predictor. The results present a further step in understanding the individual differences that may govern good cybersecurity practices, highlighting the need to focus directly on more effective training and awareness mechanisms.