The Impact of Guardianship, Offender Motivation, and Target Characteristics on Organizational Security in Government Agencies

This study examined the factors influencing data breach risks in Philippine government entities using Routine Activity Theory, focusing on guardianship, offender motivation, and target characteristics. Drawing from the 2016 COMELEC and 2023 PhilHealth data breaches, the research highlighted how weaknesses in government data management systems exposed sensitive information and increased risks such as identity theft and financial fraud. Data collected from a cross-sectional survey of government employees in Region III were analyzed using multiple linear and moderated regression analyses. Findings revealed that data breach risk was primarily driven by vulnerable information assets and insufficient guardianship rather than offender motivation alone. Government data were found to be highly valuable, visible, and accessible, increasing exposure to cyber threats when protective controls were inconsistently applied. Effective guardianship mechanisms, including institutional policies, oversight, and access controls, significantly reduced breach risks. Moreover, organizational and human-centered protective factors, such as cybersecurity awareness, training, and resistance to social engineering, mitigated vulnerabilities. Overall, the study underscores cybersecurity as a socio-technical issue and provides empirical support for strengthening government cybersecurity measures to protect sensitive public information.