Identifying Behavioral Constructs in Relation to User Cybersecurity Behavior

A behavior such as enabling two factor authentication has a positive impact on a users’ information security. It is assumed that given the benefits, users will want to perform this cybersecurity related behavior. However, some users choose not to perform the beneficial security behavior. Varied explanations have been provided as to why users choose to perform or not perform cybersecurity behaviors. The factors that influence users in the decision making of whether to perform or not perform a cybersecurity related behavior are referred to as constructs. This study seeks to combine the results of selected studied, with the aim of identifying prominent user cybersecurity behavior constructs, as well as the relationships between the constructs. The contributions made by the study is the consolidated visualization of behavior constructs that have an influence on user cybersecurity behavior. Furthermore, the study also provides practical applications of the cybersecurity behavior constructs. To achieve the goals of the study, a literature review is used as the study methodology. Data from previous studies is systematically collected, and analyzed. The study makes use of the Theoretical Domains Theory as a tool, which aids in consolidating the different behavior constructs found in cybersecurity literature. The constructs Beliefs about Capabilities, Beliefs about Consequences, Reinforcements, Social Influences, Intentions, Emotions, Social/Professional Role and Identity, Knowledge and Skills are found to have influence on cybersecurity behavior.