The human factor in cybersecurity: from risk profiles to resilience
Zofia Przymus, Karolina Małagocka, Krzysztof Przybyszewski · Procedia Computer Science · 2024
This study presents a diagnostic tool for assessing cyber behaviour in remote working environments, going beyond traditional expectancy theory. Four distinct profiles have been identified - Cautious unaware (Cautious), Risk-seekers unaware (Careless), Cautious aware (Reasonable) and Risk-seekers aware (Risk-seekers) - highlighting the key role of human behaviour in the realm of cybersecurity. The study emphasis the different requirements of each group, reinforcing the need for a human-centred approach in developing effective cybersecurity policies. Our results show different levels of awareness and risk behaviour among remote workers, sheds the need to adapt security strategies. The results of the study help to better align preventive and cybersecurity measures within organisations, and therefore better allocate resources to support organisational cyber resilience. The study contributes to a broader discourse on integrating human insights with technological safeguards to strengthen digital security in remote working environments.