Human Factors influencing Compliance to Cyber Security Practices by Employees of Public Universities in Southeast Nigeria

Abstract

The increasing use of technology in workplaces has led to a rise in cyber threats, making it essential for employees to have adequate knowledge and skills to ensure cyber safety. The study examined the human factors that influence the cyber security practices of employees in public universities in Southeast in Nigeria. The theory of planned behavior and diffusion of innovation theory were adopted as the theoretical framework of the study. The study adopted a mixed methods research design which involved the use of quantitative and qualitative instruments for data collection. For the quantitative data, questionnaire was used while the In depth Interview (IDI) guide was used to gather qualitative data. The sample size of 1068 respondents selected through the Taro Yamane statistical method of sample size determination was adopted for the study. The multistage sampling procedure involving the use of cluster and simple random sampling techniques was adopted in selecting the respondents for the study. Twelve IDI respondents were selected using the purposive sampling technique of non probability sampling method. The quantitative data were processed using the Statistical Package for Social Sciences (SPSS) software version 20.Descriptive statistics such as simple percentages, frequency tables and graphic illustrations were used to analyze the quantitative data. The qualitative data were analyzed using content analysis. The findings indicate that while employees have some knowledge of cyber security, they lack adequate skills and awareness to protect themselves and the university's information systems. Also, results of the study show that factors that influence cyber security practices include organizational culture, training, motivation, and attitudes towards cyber security. Therefore, the study recommends the development of a comprehensive cyber security policy that incorporates employee training and awareness programs, regular system updates and maintenance, and strict enforcement of cyber security policies. It also highlights the need for a positive organizational culture that prioritizes cyber security and fosters a sense of responsibility among employees towards protecting the university's information systems.