Abstract:Cyber security incidents are increasing and humans play an important role in reducing their likelihood and impact. We identify a skewed focus towards technical aspects of cyber security in the literature, whereas factors influencing the secure behaviour of individuals require additional research. These factors span across both the individual level and the contextual level in which the people are situated. We analyse two datasets of a total of 37,075 records from a) self-reported security behaviours across the EU, and b) observed phishing-related behaviours from the industry security awareness training programmes. We identify that national culture, industry type, and organisational security culture play are influential Variables (antecedents) of individuals' security behaviour at contextual level. Whereas, demographics (age, gender, and level or urbanisation) and security-specific factors (security awareness, security knowledge, and prior experience with security incidents) are found to be influential variables of security behaviour at individual level. Our findings have implications for both research and practice as they fill a gap in the literature and provide concrete statistical evidence on the variables which influence security behaviour. Moreover, findings provides practical insights for organisations regarding the susceptibility of groups of people to insecure behaviour. Consequently, organisations can tailor their security training and awareness efforts (e.g., through behaviour change interventions and/or appropriate employee group profiles), adapt their communications (e.g., of information security policies), and customise their interventions according to national culture characteristics to improve security behaviour.

Global Voices in Hacking (Multinational Views)

Why College Students Commit Computer Hacks: Insights from a Cross Culture Analysis.

Juvenile Hackers: An Empirical Test of Self-Control Theory and Social Bonding Theory

Criminal expertise and hacking efficiency

Assessing the Factors Associated With the Detection of Juvenile Hacking Behaviors

Cyber security insights into self-proclaimed virtual world hackers

Determinants of reporting cybercrime: A comparison between identity theft, consumer fraud, and hacking

The Phenomenon of Hacker and Its Implications in the Legal Culture

Hacktivists: Cyberterrorists or Online Activists?

A Human Dimension of Hacking: Social Engineering through Social Media

The Art of Cybercrime Community Research

Decoding the Binary: Reconsidering the Hacker Subculture through a Gendered Lens

AN INSIGHT INTO THE DIFFERENCES OF PSYCHOLOGICAL DISPARATE MOTIVATIONS BETWEEN HACKERS AND CRACKERS

Individual and Contextual Variables of Cyber Security Behaviour -- An empirical analysis of national culture, industry, organisation, and individual variables of (in)secure human behaviour

A Bibliometric Study of Research Trends in Cross-Border Cybercrime

On Hacker and Network Security

The Ethics of Hacking: Should It Be Taught?

Gathering Insights from Teenagers' Hacking Experience with Authentic Cybersecurity Tools

Exploring the Subculture of Ideologically Motivated Cyber-Attackers

Moral Beliefs, Self-Control, and Sports: Effective Antidotes to the Youth Computer Hacking Epidemic

Exploring key hackers and cybersecurity threats in Chinese hacker communities