Abstract

This paper critically examines the role of human factors in organiza- tional cybersecurity through a bibliometrics approach supported by qualitative analyses. In an evolving digital landscape, cyber threats have outpaced the ca- pacity of organizations to secure their operations, with economic and psycholog- ical implications escalating. While technology-based defenses are essential, the paper posits that cybersecurity strategy should also account for human behaviors and vulnerabilities. The results highlight individuals' critical role as potential weak links or safeguards within the digital realm. Bibliometric analysis con- ducted on a pool of 200 papers extracted from Web of Science (WoS) database. Findings consolidate the idea of cybersecurity as a sociotechnical domain and underscore the need for a comprehensive cybersecurity strategy, transcending purely technological defenses, to incorporate aspects of human behavior, emo- tions, and organizational culture. This work also stresses the efficacy of strategies such as deterrence, fear appeal, continuous education, and sector-specific policies in improving Information Security Policy (ISP) compliance. The paper concludes by suggesting some potential future research to bolster both theory and practice.

Share

COinS