User behaviour’s contribution to better Cyber Security Management

Abstract

According to theoretical and empirical knowledge, cybersecurity awareness is a crucial issue in cyber security. The main actors in cyber security are people, and one way to reduce risk in cyberspace is to increase knowledge of security concerns. Companies lose money as a result of data breaches and production losses brought on by cyberattacks. Consequently, there has been a surge in research endeavours aimed at comprehending the cybersecurity behaviours of users. The benefit of knowing user behaviours is that researchers and security professionals may utilize this information to start altering behaviours for the sake of cybersecurity. Similar cybersecurity behaviours have been categorized by several research, while the naming systems used vary. Sanctions, a decline in customer loyalty, and damage to one's brand may all arise from data breaches. Business continuity is also impacted by cyberattacks, which make it difficult for organizations to maintain constant production. This paper aims to demonstrate that, in addition to computer science research, behavioural sciences that study user behaviours can offer useful strategies to improve cyber security and lessen the impact of attackers' social engineering and cognitive hacking tactics (i.e., disseminating misleading information). Thus, in this study, we provide fresh insights on the psychological characteristics and individual variances of computer system users that account for their susceptibility to cyberattacks and crimes. Our investigation shows that different computer system users have different cognitive capabilities, which affects their ability to defend against information security threats. In order to improve network and information security, we identify research gaps and suggest possible psychological techniques to help computer system users follow security requirements.