The role of demographic factors and their association with cybersecurity behaviour in higher education: an Estonian example

Cybersecurity is a multifaceted challenge that cannot be addressed solely through technological solutions. A critical factor in the field of cybersecurity is individual behaviour. In this article, risky behaviour is defined as specific computer-based activities associated with increased vulnerability, whereas protective behaviours are identified as actions users take to maintain information security. Examples of risky actions include saving passwords in visible locations, connecting to insecure networks, interacting with links from unknown senders, and oversharing personal information online. Conversely, risk-aware behaviour includes practices such as installing antivirus software, maintaining updated web browsers, and avoiding unauthorized software. The purpose of this article is to examine the associations between individuals’ self-reported cybersecurity behaviours and various factors, including demographics, Internet use routines, completion of cybersecurity training, risk perception, and exposure to offending. Data were collected from 277 affiliates of the Estonian Academy of Security Sciences using an online questionnaire.