Cybersecurity education, awareness raising, and training initiatives: National level evidence-based results, challenges, and promise. Issue 119 (August 2022)

• Record Type: Journal Article
• Authors: Shillair, Ruth; Esteve-González, Patricia; Dutton, William H.; Creese, Sadie; Nagyfejeo, Eva; von Solms, Basie
• Is Part Of: Computers & security. Issue 119(2022)
• Publication Date: 2022-08
• Subjects: Cybersecurity -- Education -- Training -- Awareness -- Internet; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2022.102756
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: This paper assesses the impact of cybersecurity education, awareness raising, and training (CEAT) on the vitality of internet use and services at the national level. CEAT encompasses one of five dimensions of a larger cybersecurity capacity building model (CMM) that was developed by the Global Cybersecurity Capacity Centre. The paper describes this dimension of capacity building within the CMM, and its indicators of education, awareness, and training in cybersecurity capacity. The paper then presents a cross-national analysis of the outcomes of CEAT on internet use based on comparative data from 80 nations. Controlling for contextual variables, such as the wealth of the nations and scale of internet use, the analysis shows a positive and statistically significant impact of CEAT on the vitality of internet use and services, as well as a distribution of CEAT scores that indicates key issues for low-income and developing nations. A qualitative analysis of responses from these nations is used to identify key reasons for their levels of maturity in this area. While recognising key limitations of these findings, it offers suggestions for policy and practice to meet the need for effective programs for education, awareness raising, and training. In addition, the research suggests the need for more detailed indicators of CEAT initiatives in more nations and over time to assess the validity of the findings and the recommendations for policy and practice in this area of capacity building offered in this paper.