The Role of the Human Factor and Awareness in Cybersecurity

Abstract

In the modern era, the widespread use of information technologies has made data security a key priority for governments, private organizations, and individual users. Information systems process billions of transactions on a daily basis, and protecting these operations cannot be achieved through technological solutions alone. Recent statistics indicate that approximately 70–90% of cybersecurity incidents are caused by the human factor. This includes employee negligence, non-compliance with security policies, vulnerability to social engineering attacks, and insufficient cybersecurity awareness.

Although technical defense mechanisms such as antivirus software, firewalls, and encryption technologies have reached a high level of sophistication, organizations that fail to address the human factor remain highly vulnerable to cyber threats. Attacks such as social engineering, phishing, vishing, and ransomware primarily exploit human psychological and behavioral weaknesses rather than technical flaws. Research consistently demonstrates that technological safeguards are significantly less effective without continuous training and the integration of cybersecurity awareness into organizational culture.

This article examines the role of the human factor in cybersecurity from a scientific perspective, analyzes the psychological and behavioral dimensions of social engineering attacks, and evaluates the impact of awareness programs on organizational security. Comparative analysis of international and local practices shows that continuous training and behavior-oriented awareness programs can substantially reduce risks arising from human error. Reports by NIST and ENISA, as well as local findings (CERT-AZ, 2023), confirm that sustained training initiatives, simulation exercises, and regularly updated security policies are among the most effective measures against social engineering threats. The study concludes that cybersecurity is not solely a technological challenge; effective management of the human factor and awareness programs are essential components of modern cybersecurity strategies.