Explore the intersection of Self-Determination Theory and cybersecurity education - A literature review

Feraru Iulia and Bacali Laura
Additional contact information
Feraru Iulia: IOSUD,, Technical University of Cluj-Napoca, Memorandumului 28, 400114, ClujNapoca, Romania
Bacali Laura: Technical University of Cluj-Napoca, Memorandumului 28, 400114, ClujNapoca, Romania

International Journal of Advanced Statistics and IT&C for Economics and Life Sciences, 2024, vol. 14, issue 1, 55-77

Abstract: This paper explores how organizations can create a sustainable, security-first culture in an increasingly complex environment where organizational and national cultures are strong influencing factors in human behaviour. In cybersecurity education, as in any effort of education, there must be a principled commitment to long-term behaviour modification through intrinsic motivation, foundational to employees acting consistently in secure ways. The review of the literature falls squarely within Self-Determination Theory, underlining the pertinence of autonomy, competence, and relatedness as distinctive factors in cybersecurity education, highlighting that these constructs are necessary at all levels for perpetual security and compliance. The results indicated that an effective security-first culture could only emerge when cybersecurity formed part of the core values and practices within organizations. It also explained that leadership styles, such as transformational and servant leadership, play an important role in the development of intrinsic motivation by fostering trust, empowerment, and a sense of shared responsibility. It also highlights how national cultural dimensions, such as individualism and power distance, may change how differently oriented employees respond to cybersecurity policies and practices. Approaches to cybersecurity education should be tailored to both organizational and national cultural factors to develop cybersecurity education strategies that could go beyond mere compliance and build a proactive security mindset. This is important because it underlines how the SDT acts as a framework for understanding how companies could help foster a security-first culture that, at the same time, will create sustainable, resilient, and intrinsically driven cybersecurity behaviours among employees.

Keywords: Behavioural change; information security; organizational culture; national culture; Self-Determination Theory (search for similar items in EconPapers)
Date: 2024
References: View references in EconPapers View complete reference list from CitEc
Citations:

Downloads: (external link)
https://doi.org/10.2478/ijasitels-2024-0017 (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:vrs:ijsiel:v:14:y:2024:i:1:p:55-77:n:1017

DOI: 10.2478/ijasitels-2024-0017

Access Statistics for this article

International Journal of Advanced Statistics and IT&C for Economics and Life Sciences is currently edited by Daniel Volovici

More articles in International Journal of Advanced Statistics and IT&C for Economics and Life Sciences from Sciendo
Bibliographic data for series maintained by Peter Golla ().