The Role of Human Factors in Cybersecurity
Traditionally, cybersecurity has focused more on technical aspects—firewalls, encryption, patching—but recent research confirms that human behavior (human factors) is a weak point that attackers often exploit. The international study “Human Factors in Cybersecurity: An Interdisciplinary Review and Framework Proposal” shows that behavior, organizational culture, and individual decision-making play a significant role in system vulnerability. For example, social engineering or phishing is effective because of weaknesses in training, knowledge, and habits within organizations.Contextual Variables that Influence Security Behavior
Cultural context, industry type, and organizational environment have been shown to influence how individuals behave toward cybersecurity. The study “Individual and Contextual Variables of Cyber Security Behavior” analyzed data from tens of thousands of respondents and identified that national culture, industry type, and organizational security culture are very important contextual variables. In addition, individual factors such as level of experience, security education, and having experienced a cyber incident also influence a person’s awareness and response.Local Challenges in Indonesia: AI, Shadow AI, and Organizational Readiness
In Indonesia, digital transformation and AI adoption have expanded the attack surface. The Cisco Cybersecurity Readiness Index 2025 report shows that only about 11% of organizations in Indonesia are highly prepared to deal with digital threats. In addition, many organizations are not yet fully aware of or able to detect the use of unofficial AI (shadow AI) in their operations, and still lack cybersecurity experts.Local Incidents and Their Effect on Public Trust
Several major cyber attacks in Indonesia have demonstrated the real consequences when human factors and organizational unpreparedness are not addressed immediately. For example, ransomware attacks against many government agencies have affected public services, and data breaches have occurred through third parties and vendors that have not been properly audited. Incidents like this not only result in financial losses, but also damage public trust in the ability of the government and the private sector to protect personal data.Recommendations for Strengthening Human-Based and Local Protection
Strategic Intent
To strengthen cybersecurity in Indonesia by taking human factors into account, several strategic steps can be taken.
Security Training & Awareness
More intensive and continuous security training and awareness, where the material is not only technical, but also covers an introduction to social engineering, organizational security culture, and new risks such as AI-based phishing.
Local Context Policies
Implementation of security policies based on local context — for example, policies that are sensitive to organizational culture and industry characteristics, so that security training and procedures are more relevant and effective.
Supply Chain & Vendor Audits
Regular audits, especially of vendors and third parties, to prevent leaks through the supply chain and external parties that are not fully controlled.
Capacity & Personnel Growth
Increasing the number and capacity of cybersecurity personnel in Indonesia through formal education and professional certification, so that organizations have staff capable of responding to modern threats.
Automated & AI-Driven Detection
Use of supporting technologies such as automated detection, supervised AI, and monitoring systems capable of detecting shadow AI while supporting rapid incident reporting.
Sources:
Human Factors in Cybersecurity: An Interdisciplinary Review and Framework Proposal, International Journal of Information Security (SpringerLink).Individual and Contextual Variables of Cyber Security Behavior (arXiv).
Cisco Cybersecurity Readiness Index 2025 (Indonesia) laporan kesiapan serta prevalensi insiden terkait AI dan shadow AI (Mobitekno / Cisco Newsroom).
Cybersecurity trends report in Indonesia: ransomware attacks, supply chain attacks, and massive data incidents (ManageEngine Blog / Reuters).
