Human-Centric Approach to Cyber Threat Identification: The Role of Cognition, Experience, and Education in Decision-Making

Abstract

This study explores the impact of human factors on cybersecurity, emphasizing how cognitive biases and the blend of knowledge, experience, and education affect cyber threat detection. It reveals that specialized education and experience enhance the ability to identify complex threats. The research, using a gamified questionnaire, assesses decision-making in simulated cyber attacks, highlighting the value of domain expertise in critical tasks like threat identification and response. It suggests further research into confidence and self-efficacy's roles in cybersecurity and underscores the need for focused training to improve detection skills and incident reporting, aiming to bolster cybersecurity defences