Human Factors influencing Compliance to Cyber Security Practices by Employees of Public Universities in Southeast Nigeria

Abstract

The increasing use of technology in workplaces has led to a rise in cyber threats, making it essential for employees to have adequate  knowledge and skills to ensure cyber safety. The study examined the human factors that influence the cyber-security practices of  employees in public universities in Southeast in Nigeria. The theory of planned behavior and diffusion of innovation theory were adopted  as the theoretical framework of the study. The study adopted a mixed-methods research design which involved the use of quantitative  and qualitative instruments for data collection. For the quantitative data, questionnaire was used while the In-depth Interview (IDI) guide  was used to gather qualitative data. The sample size of 1068 respondents selected through the Taro Yamane statistical method of sample  size determination was adopted for the study. The multistage sampling procedure involving the use of cluster and simple random  sampling techniques was adopted in selecting the respondents for the study. Twelve IDI respondents were selected using the purposive  sampling technique of non-probability sampling method. The quantitative data were processed using the Statistical Package for Social  Sciences (SPSS) software version 20.Descriptive statistics such as simple percentages, frequency tables and graphic illustrations were  used to analyze the quantitative data. The qualitative data were analyzed using content analysis. The findings indicate that while  employees have some knowledge of cyber-security, they lack adequate skills and awareness to protect themselves and the university's  information systems. Also, results of the study show that factors that influence cyber-security practices include organizational culture,  training, motivation, and attitudes towards cyber-security. Therefore, the study recommends the development of a comprehensive cyber- security policy that incorporates employee training and awareness programs, regular system updates and maintenance, and strict  enforcement of cyber-security policies. It also highlights the need for a positive organizational culture that prioritizes cyber-security and    fosters a sense of responsibility among employees towards protecting the university's information systems.