The present paper focuses on Cyber Security Awareness Campaigns, and aims to identify key factors regarding security which may lead them to failing to appropriately change people\'s behavior. The increasing recognition of human susceptibility to cyber threats highlights the imperative for integrating human factors into cybersecurity. The research explores the diversity of definitions across cybersecurity literature, revealing a significant discrepancy that hampers interdisciplinary understanding and the effective incorporation of human factors practices. In particular, our work considers these challenges from Different attitude of employs in the time of duty, a Psychology perspective and self-security awareness present a biggest challenge. However, as we believe that understanding how people perceive risks is critical to creating effective awareness campaigns. Changing behavior requires more than providing information about risks and reactive behaviors - firstly, people must be able to understand and apply the advice, and secondly, they must be motivated and willing to do. we extract essential components for an awareness campaign as well as factors which can lead to a campaign\'s success or failure. Finally, the research focusing to the peoples which can be able to understand and concern the risk of variabilities, enhancing its defenses against human-centric vulnerabilities emphasizing the critical role in mitigating human errors and human-induced problems in cybersecurity.
Introduction
Human factors play a critical role in cybersecurity, as many cyber incidents result from human errors rather than technical vulnerabilities. Security decisions made by users and administrators, such as weak password usage, misconfigurations, poor patch management, and unsafe online behavior, significantly increase cybersecurity risks. According to industry reports, a large percentage of security breaches are linked to human mistakes. Despite growing research in this area, human vulnerabilities continue to be exploited by attackers, highlighting the need to better understand human behavior when designing secure systems.
The study aims to investigate how human actions and errors contribute to cybersecurity incidents by examining common mistakes, psychological influences, and organizational factors. It seeks to identify major human-related vulnerabilities and develop strategies to reduce cybersecurity risks across different sectors.
Existing cybersecurity approaches such as phishing awareness training, password policies, multi-factor authentication (MFA), Zero Trust Architecture, Security Information and Event Management (SIEM), User Behavior Analytics (UBA), artificial intelligence-based threat detection, and regular software updates help improve security but each has limitations. Common challenges include user non-compliance, alert fatigue, privacy concerns, implementation complexity, and vulnerability to sophisticated attacks.
The research uses a mixed-methods approach, combining quantitative surveys and qualitative analysis to study human-related cybersecurity risks. Key parameters examined include phishing error rates, password mismanagement, human error frequency, and incident recovery times.
Findings show that employee behavior strongly influences cybersecurity outcomes. Common risky behaviors include:
Leaving computers unsecured when away from workstations.
Using unsecured personal storage devices.
Downloading files from unknown sources and opening suspicious links.
Sharing passwords and devices with colleagues.
Believing that cybersecurity is solely the responsibility of the IT department.
The results reveal that employees with lower cybersecurity awareness demonstrate significantly higher rates of unsafe behavior than those with greater awareness. Lack of self-awareness and cybersecurity knowledge increases the likelihood of security breaches, making organizations more vulnerable to cyberattacks.
Conclusion
The study gives elucidation of human factors within cybersecurity emerges as a critical area for scholarly inquiry, given its profound implications for the efficacy of mitigative strategies against human-induced vulnerabilities. and provide overall conceptual frameworks of the antecedents of employees’ cybersecurity behavior. In so doing, we emphasize both end-users of cybersecurity in organizations and employees focused specifically on cybersecurity work. We provide an expansive agenda for future organizational science research on cybersecurity The engagement of human factors practitioners, predicated on a unified understanding of human factors, is indispensable. Therefore, the cybersecurity domain must achieve consensus on these definitions to bolster its defensive capabilities against the multifaceted challenges posed by human elements. researcher in this study gives highlight for the number of breaching attacks inside organization. researcher take this awareness happened routinely inside organization for to assist the Information technology department activate the rules and policy for how the employee developing to protect attack.
References
[1] Nobles, C. (2022, March). The Dunning-Kruger Effect around human factors in cybersecurity, Top Cyber News Magazine https://www.linkedin.com/company/topcybernews/
[2] Rahman, T., Rohan, R., Pal, D., & Kanthamanon, P. (2021, June). Human factors in cybersecurity: a scoping review. In The 12th International Conference on Advances in Information Technology (pp. 1-11).
[3] G. T. Services. Ibm security services 2014 cyber security intelligence index. Technical report, 2014.
[4] B. Schneier. The psychology of security. In Progress in Cryptology - AFRICACRYPT 2008, volume 5023 of Lecture Notes in Computer Science, pages 50–79. Springer Berlin Heidelberg, 2008.
[5] R. West. The psychology of security. Communications of the ACM, 51(4):34–40, 2008.
[6] Human Factors and Ergonomics Society. n.d. What are human factors and ergonomics? https://www.hfes.org/About- HFES/What-is-Human-Factors-and- Ergonomics.
[7] Security. (March 2022). Top Cyber News Magazine. Retrieved July 1, 2022 from https://www.linkedin.com/company/topcybernews/
[8] K. Jadhav, S. Haggag, and H. Haggag, \"Diving deep into human centric issues within cyber security,\" in Joint 4th International Workshop on Experience with SQuaRE Series and Its Future Direction and 1st Asia-Pacific Software Engineering and Diversity, Equity, and Inclusion Workshop (IWESQ 2022+ APSEDEI 2022), Tokyo, Japan, 2022, pp. 60–68.
[9] Corman, \"The Human Element in Cybersecurity–Bridging the Gap Between Technology and Human Behaviour,\" 2023.
[10] Wang, P. Zheng, Y. Yin, A. Shih, and L. Wang, \"Toward human-centric smart manufacturing: A human-cyber-physical systems (HCPS) perspective,\" Journal of Manufacturing Systems, vol. 63, pp. 471–490, 2022.
[11] R. Rohan et al., \"Enhancing Cybersecurity Resilience: A Comprehensive Analysis of Human Factors and Security Practices Aligned with the NIST Cybersecurity Framework,\" in Proc. 13th Int. Conf. Advances in Information Technology, 2023, pp. 1–16.
[12] L. Bishop, \"The employee experience in cybersecurity and how to mitigate risk,\" Ph.D. dissertation, Cardiff University, Cardiff, U.K., 2023.
[13] Smith and K. Patel, \"Building Cyber Resilience through Security Culture: The Role of Human Factors in Machine Learning Environments,\" ACM Transactions on Cyber-Physical Systems, vol. 6, no. 3, pp. 1-22, 2023.
[14] N. Poehlmann et al., \"The organizational cybersecurity success factors: an exhaustive literature review,\" in Advances in Security, Networks, and Internet of Things: Proc. SAM\'20, ICWN\'20, ICOMP\'20, ESCS\'20, 2021, pp. 377–395.
[15] N. M. A. Chisty, P. R. Baddam, and R. Amin, \"Strategic approaches to safeguarding the digital future: insights into next-generation cybersecurity,\" Engineering International, vol. 10, no. 2, pp. 69–84, 2022.
[16] Heather Young, Tony van Vliet, Josine van de Ven, Steven Jol, and Carlijn Broekman. 2017. Understanding Human Factors in Cyber Security as a Dynamic System. In International Conference on Applied Human Factors and Ergonomics. Springer, 244?254.
[17] Alex Vieane, Gregory Funke, Robert Gutzwiller, Vincent Mancuso, Ben Sawyer, and Christopher Wickens. 2016. Addressing human factors gaps in cyber defense. In Proceedings of the Human Factors and Ergonomics Society Annual Meeting, Vol. 60. SAGE Publications Sage CA: Los Angeles, CA, 770?773.