The human firewall effect training and awareness as drivers of phishing mitigation and reporting behavior

Résumé

Phishing attacks remain a major cybersecurity threat, particularly in environments where human factors play a critical role in system vulnerability. While organizations widely implement information security training and awareness programs, evidence on their effectiveness in promoting protective behavior remains inconsistent. This study examines the relationships among information security training, security awareness, phishing threat mitigation behavior, and reporting behavior within humanitarian organizations operating in Mogadishu, Somalia. A quantitative cross-sectional design was employed, and this study is presented as a Brief Research Report to provide concise and focused empirical evidence on these relationships. Data were collected from 121 employees using a structured questionnaire, and Partial Least Squares Structural Equation Modeling (PLS-SEM) was applied to analyze the proposed relationships. The results show that information security training significantly enhances security awareness and reporting behavior but does not directly influence phishing threat mitigation behavior. Security awareness emerged as the strongest predictor of both mitigation and reporting behaviors. Furthermore, mediation analysis revealed that security awareness fully mediates the relationship between training and mitigation behavior and partially mediates the relationship between training and reporting behavior. These findings highlight the importance of human-centered cybersecurity strategies, emphasizing continuous awareness-building rather than reliance on traditional training alone. The study contributes to theory by clarifying the role of awareness as a behavioral mechanism and provides practical implications for strengthening organizational resilience in fragile and resource-constrained contexts.

Citer ce document

Accès au document

Texte intégral en lecture en ligne, réservé aux abonnés SPHAERO et aux membres de l'institution. Se connecter

Voir l'article sur le site de la revue

Auteur(s)

Statistiques

Consultations : 2

Téléchargements : 0