Development of a Framework for Enhancing Cybersecurity Behaviour of Smartphone Users in India

Abstract

Cybersecurity incidents are increasing in frequency, intensity, and sophistication, indicating that the technical security controls alone cannot mitigate the new era of cybersecurity risks. newlineThis era requires good cyber hygiene to be exhibited by end-user to improve cybersecurity. Research indicates that the societal culture has a bearing on avoiding cybersecurity risk. Since most of the studies on the subject are done in other countries, such studies may not apply to India, which has a different societal culture. Research related to Indian smartphone user s newlinecybersecurity behaviour is scarce. newlineThis study has attempted to address the above-mentioned research gap and has successfully developed a framework, which improves smartphone users cybersecurity behaviour. The researcher conducted this study in two phases. The first phase objective was to know the current newlinecybersecurity behaviours of smartphone users in India. The objective of the second phase was to develop a framework and test it for its effectiveness in improving the cybersecurity newlinebehaviour of smartphone users. newlineIn the first phase, an exploratory sequential mixed method approach was undertaken to newlineunderstand the cybersecurity behaviour of smartphone users. The patterns show that the users newlinewere aware of cybersecurity threats related to their smartphone and were motivated to protect newlinetheir smartphone and data. However, they lacked the skills to do so. Additionally, a categorical newlineanalysis using a chi-square test followed by post-hoc analysis using Bonferroni correction was newlineperformed on the data. The analysis mentioned above revealed a statistically significant newlineassociation between cybersecurity behaviour and variables like gender, age, mobile OS and newlinemother tongue. newlineIn the second phase, the researcher selected the Fogg Behaviour Model (FBM) to develop an newlineintervention. It effectively captures the essential requirements of behaviour change, i.e. capability, opportunity and motivation. A framework was developed for the design of a newlinecybersecurity awareness program