Cybersecurity attitudes in higher education institutions: A behavioural analysis of faculty and staff in the United Arab Emirates

Said Badreddine (), Tariq Alwada'n, Mohammad Abdur Razzaque (), Ala Al Kafri (), Asem Omari (), Azmi Alazzam () and Hamsa Al Ammari ()

Edelweiss Applied Science and Technology, 2025, vol. 9, issue 10, 439-453

Abstract: Cybersecurity in higher education institutions (HEIs) is increasingly recognized as a behavioral and organizational challenge, not solely a technical one. This study investigates the perceptions, awareness, and attitudes of faculty and staff in UAE HEIs toward cybersecurity policies and practices, with a focus on how institutional communication, policy frameworks, and cultural dynamics shape behaviors. Semi-structured interviews were conducted with academic and administrative staff, generating rich qualitative data that were analyzed thematically. The findings reveal three dominant themes. First, cybersecurity training and communication are often symbolic, generic, and disconnected from daily professional contexts, limiting their ability to enhance coping appraisal. Second, misalignment between policy and practice results in frustration and circumvention, as rigid protocols undermine perceived behavioral control and conflict with academic autonomy. Third, organizational culture and peer dynamics play a decisive role in shaping norms of compliance or non-compliance, with weak cultural embedding leaving security viewed as an IT department responsibility rather than a shared institutional value. These findings were integrated into a conceptual model grounded in Protection Motivation Theory (PMT), the Theory of Planned Behavior (TPB), and the COM-B framework. The model demonstrates how institutional mechanisms and cultural factors converge on employee attitudes, which in turn drive secure or insecure behaviors. The study advances theoretical understanding of cybersecurity as a behavioral phenomenon and offers practical recommendations for HEIs, including role-specific training, participatory policy design, and cultural embedding. By addressing attitudinal drivers, HEIs in the UAE can build more resilient cybersecurity cultures in increasingly complex threat landscapes.

Keywords: Behavioural Analysis; Cybersecurity Attitudes; Higher Education Institutions; Information Security Culture; UAE. (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
https://learning-gate.com/index.php/2576-8484/article/view/10445/3391 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:ajp:edwast:v:9:y:2025:i:10:p:439-453:id:10445

Access Statistics for this article

More articles in Edelweiss Applied Science and Technology from Learning Gate
Bibliographic data for series maintained by Melissa Fernandes ().