Umeå University's logo

Computer security is more than just about the technological systems; it also relates to the people that use the systems and how their different behaviours may be exploited. Organizations are prone to security breaches, which sometimes are caused by human error. As a result, organizations should seek to improve their employees' knowledge about cyber security and their capability to engage in secure cyber behaviours. It is possible to target groups ranging from basic users who need some basic understanding of the current threat environment and how to utilize the associated preventive mechanisms, to security experts who need practical exposure in responding to security incidents. Risk-taking preferences, decision-making styles, demographics, and personality characteristics, such as gender, age, culture and emotions, have been found to significantly affect the predictive ability of good security behavior. How gender and age mediate the influences on cyber security beliefs and behaviours among employees is quite interesting. Using behavioural cyber security and human factors to provide insight into relevant theories and principles, this paper proposes an interdisciplinary framework that combines these disciplines.