The Role of the Human Factor in the Cybersecurity Ecosystem

Abstract

Cybersecurity has become a critical point for the daily operation of organizations and the protection of individuals in digital environments, which are increasingly complex. Much of the efforts in this area are focused on developing defense tools against possible threats, however, they do not take into account the human factor. This article analyzes the impact of training and awareness in terms of risk reduction and control, along with the role of emotions, cognitive biases, and social engineering. All of them can cause impulsive decisions to be made that are not the most appropriate and generate a security incident. Strategies are proposed to integrate this human factor into protection and prediction models, underlining the need for a fully multidisciplinary approach to encompass all psychosocial dynamics.