Key points are not available for this paper at this time.
Studying insider cybersecurity behavior is essential for understanding the human factors that contribute to security incidents and for developing holistic, adaptive security strategies. This review consolidates existing literature by examining the theoretical frameworks and behavioral distinctions commonly used to explain insider cybersecurity behavior. It draws on a systematic literature review of 123 articles and proposes a representative model that synthesizes key theoretical approaches. The analysis reveals a strong emphasis on deliberate behaviors, with only 15% of the literature addressing automatic behaviors. It also highlights how theories are applied across both desirable and undesirable behaviors, revealing inconsistencies and overlaps in their treatments. In addition to mapping current insights, the review identifies key gaps and future research directions. These include methodological improvements, greater attention to automatic behaviors, and more precise behavioral definitions to enable clearer distinctions. Overall, this review offers valuable insights for researchers and practitioners aiming to better understand and manage insider cybersecurity behavior.
Prabhu et al. (Thu,) studied this question.