Editorial Highlights Human and Organizational Factors in Digital Business Cybersecurity Governance - Bioengineer.org
Digital transformation initiatives often fail because organizations focus on technical controls rather than human behavior and institutional readiness, according to a new editorial.
Digital business transformation initiatives frequently expose organizations to disruptions and data disclosures because technical mechanisms are introduced without accounting for operational vulnerabilities and human participation.
The editors of a new editorial in Frontiers in Computer Science argue that achieving secure digital transformation requires institutional leaders to account for human behavior, system usability, and organizational readiness.
They note that user participation in cybersecurity safeguards often diminishes or becomes hazardous when institutional conditions demand excessive user effort or fail to communicate protective requirements clearly.
When organizational risk management lacks clear allocations of responsibility, sufficient operational resources, or interdepartmental coordination, standard security awareness campaigns fail to achieve meaningful protection.
The editorial curates four distinct investigations reflecting diverse methodological traditions to establish an evidence-based foundation for integrating cybersecurity practices into organizational workflows.
Human factors in cybersecurity
A study assessing cybersecurity through human factors conducted a systematic literature review covering 2015 to 2025 using Preferred Reporting Items for Systematic Reviews and Meta-Analyses guidelines alongside a questionnaire.
The findings demonstrated that frequent password alterations and multi-factor authentication represent the most annoying security requirements for users, whereas single sign-on, biometric authentication, and automated updates are the most appealing.
This framework provides a theoretical basis for constructing digital ecosystems that balance security, user-friendliness, and operational sustainability without overwhelming end users with burdensome authentication procedures.
The research emphasizes that human-centric cybersecurity design must move past basic ease-of-use concepts to focus comprehensively on the human-technology nexus.
Healthcare workforce behaviors
Investigating healthcare cybersecurity in Saudi Arabia, researchers applied general deterrence and protection motivation theories to survey data from a convenience sample of 252 healthcare employees.
Their analysis revealed that employee security behaviors were significantly influenced by trust, exploitability, awareness, and certainty of punishment, while privacy and complexity affected threat appraisal.
Projected threat, projected vulnerability, and self-efficacy demonstrated no effect on cybersecurity behavior, prompting the editorial team to call for longitudinal and cross-sector investigations.
The study highlights that employee security behaviors are directly shaped by organizational trust, system exploitability, security awareness, and the certainty of disciplinary punishment.
Conversely, privacy concerns and technological complexity influence how employees appraise security threats, whereas projected vulnerability and self-efficacy did not exert a measurable effect on compliance behaviors in this setting.
Public sector governance
Examining public sector governance in Brazil, a study evaluated technological maturity across the health, education, and finance sectors, arguing that traditional public administration focuses excessively on incident response and controls.
The analysis emphasizes that maintaining uninterrupted operations across interconnected public systems requires coordinated national attention rather than fragmented oversight by isolated agencies.
Cardoso highlights how public technology enterprises contribute to threat detection, operational risk governance, and institutional resilience through capacity building and ongoing risk assessments.
The study underscores that public-private partnerships provide a more resilient foundation than traditional models centered strictly on incident response.
Diverse internet users
Focusing on diverse internet users in India, researchers used semi-structured discussion guides and thematic analysis across five focus groups encompassing secondary students, university students, senior citizens, and social activists.
The thematic findings demonstrate that low technological literacy and technology-associated anxiety represent primary impediments to safe participation in online transactions and social media.
Participants exhibited an insufficient appreciation of how everyday digital interactions affect personal privacy and security, necessitating targeted awareness campaigns calibrated to distinct digital literacy levels.
The study identifies online transaction vulnerabilities, social media risks, and low technical literacy as the primary challenges alongside an absence of appreciation for how online activities compromise personal privacy.
Future research agenda
The editorial calls on practitioners to ensure that technical safeguards remain adaptable to specific user groups and operational environments, preserving both data privacy and service continuity.
For future scholarly work, the editors outline an agenda centered on longitudinal and cross-sector investigations to verify whether user-centered control designs produce durable behavioral change.
The research establishes that achieving secure and trustworthy digital transformation requires institutional leaders to recognize that these factors fluctuate across different user populations and institutional settings.
Related
