Cybersecurity when working from home during COVID-19: considering the human factors
This article examines how people’s behaviors and social surroundings influenced employees to practice safe security practices while working remotely during the COVID-19 pandemic. The authors use Vygotsky’s social constructivist learning theory from both psychology and sociology. The theory suggests that we learn better when we learn with others and within our cultural experiences (Vygotsky, 1978). In collaboration with these social sciences, they demonstrate that cybersecurity isn’t really all about technical stuff. It shows it is also about human behavior which is influenced by how we feel, our environment, and how we copy one another.
The research team within the article wanted to get an idea on what workers went through when they abruptly had to work from home in 2020. The team asked the group about how employees dealt with this shift, their take on cybersecurity practices, how they picked up safe online habits, and what suggestions they had for better policies and training in the future (Whitty et al., 2023). They figured that personal circumstances like stress levels, having to share living space with others, and varying tech access would really impact how safely people worked remotely.
Whitty and her team employed Interpretative Phenomenological Analysis (IPA), a qualitative method used to examine subjective experiences, to address these questions. They conducted interviews with twenty seven employees from a variety industries in Australia and examined their responses to identify patterns. After multiple reviews, the researchers discovered five main issues.
- Stress associated with transitioning from the office to a home environment.
- Constraints within workspace.
- Differing levels of cybersecurity knowledge.
- Insufficient training leading to dependence on family members or colleagues for assistance.
- Digital disparities such as outdated technology and subpar internet connectivity (Whitty et al., 2023).
The article reminds us that cybersecurity isn’t just about computers or coding – it’s about people and their everyday lives. By bringing attention to social and emotional realities behind online safety, it shows how issues like fairness, access, and inclusion shape who gets to feel secure online. People who have fewer resources or support face the biggest struggles just trying to protect themselves on a digital front.
Whitty and her team really emphasize the human side of things. They suggest companies or infrastructures move away from generalized training and instead create more personal approaches such as interactive gaming, pop quizzes in between modules or etc. Their idea is to build systems that consider people’s mental realities, living situations, and how much they actually know about technology. They essentially negate that humans are the weakest link and suggest that they may be the powerhouse of cybersecurity.