Holistic cyber hygiene education: Accounting for the human factors

• Published in: Computers & security 2020-05, Vol.92, p.101731-6, Article 101731
• Main Authors: Neigel, Alexis R., Claypoole, Victoria L., Waldfogle, Grace E., Acharya, Subrata, Hancock, Gabriella M.
• Format: Article
• Language: English
• Subjects: Accounting; Colleges & universities; Computer education; Curricula; Cyber education; Cyber hygiene; Cybersecurity; Gender aspects; Human factors; Hygiene; Motivation; Risk
• ISSN: 0167-4048; 1872-6208
• DOI: 10.1016/j.cose.2020.101731

•This study examined cyber hygiene in a sample of university students.•Information handling and incident reporting predicted engagement in cyber hygiene behaviors.•Email usage and Internet usage predicted engagement in cyber hygiene behaviors.•Trust in technology predicted men's cyber hygiene behaviors.•Intrinsic motivation predicted women's cyber hygiene behaviors. Cybersecurity is paramount in modern cyberdefense. One important factor linked to reducing human-instigated breaches of cybersecurity includes cyber hygiene. Cyber hygiene is the adaptive knowledge and behavior to mitigate risky online activities that put an individual's social, financial, and personal information at risk – a danger that is significantly compounded when discussing the risk to entire countries as opposed to a single individual. Interestingly, even though the human is the greatest risk to cybersecurity, very little research has examined the latent individual differences associated with developing cyber hygiene-related knowledge, attitudes, and behaviors. Thus, the goal of the present study was to address this gap in cyber hygiene research. The results from 173 university participants demonstrated that several factors, such as information handling, incident reporting, and password management were associated with better cyber hygiene. Individual differences such as trust in technology and intrinsic motivation were predictive of improved cyber hygiene – but were subject to significant sex differences. Differences across academic majors, such as science and technology majors, also emerged. Finally, we discuss the importance of understanding the role of human factors in modern cybersecurity and the potential practical implications associated with refining current course curricula in computer and information sciences.