Submit your papersSubmit Now
For Enquiries: [email protected]
IIARD LogoIIARD

Cybersecurity Awareness and Online Safety Practices Among Tertiary Institution Students in Enugu State, Nigeria

Adesegun Nurudeen Osijirin, Shamsudeen Mohammed Sada, Victor Utibe Edmond, Leonard C. Anigbo, Oliver Okechukwu

Abstract

The rapid expansion of digital technologies in higher education has heightened students’ exposure to cybersecurity threats, rendering cybersecurity awareness and safe online behaviour critical issues. This study assessed the level of cybersecurity awareness, knowledge of specific cyber threats, and online safety practices among tertiary institution students in Enugu State, Nigeria, and analysed the influence of cybersecurity awareness on students’ online safety practices. A descriptive survey research design was employed. The study population consisted of students from selected public tertiary institutions in Enugu State, with a sample of 385 respondents selected using Taro Yamane’s formula and stratified proportional random sampling. Data were collected using a structured 36-item questionnaire (12 items per research question) measured on a four-point Likert scale. Data analysis included descriptive statistics (mean and standard deviation) and inferential statistics (chi- square and regression analysis) at a 0.05 level of significance. The findings revealed that students demonstrated a moderate level of general cybersecurity awareness, but their knowledge of specific cyber threats and protective measures was generally low. Online safety practices were also found to be inadequate, particularly in advanced security behaviours such as two-factor authentication and data privacy management. Inferential results indicated a significant relationship between cybersecurity awareness and online safety practices, with awareness positively and significantly influencing students’ safety behaviour. The study concludes that while cybersecurity awareness among tertiary institution students is improving, it remains insufficient to ensure effective online safety practices. The study recommends integrating practical, behaviour-focused cybersecurity education into tertiary institution curricula to enhance students’ digital safety and resilience against cyber threats.

Keywords

Cybersecurity awarenessonline safety practicescyber threatstertiary institution studentsNigeria

References

Abawajy, J. (2014). User preference of cyber security awareness delivery methods. Behaviour & Information Technology, 33(3), 237–248. https://doi.org/10.1080/0144929X.2012.708787 Acquisti, A., Brandimarte, L., & Loewenstein, G. (2015). Privacy and human behaviour in the age of information. Science, 347(6221), 509–514. https://doi.org/10.1126/science.aaa1465 Aderibigbe, A., & Ocholla, D. (2020). Information security awareness among undergraduate students in selected universities in South Africa. South African Journal of Information Management, 22(1), Article 1131. https://doi.org/10.4102/sajim.v22i1.1131 Arachchilage, N. A. G., & Love, S. (2014). Security awareness of computer users: A phishing threat avoidance perspective. Computers in Human behaviour, 38, 304–312. https://doi.org/10.1016/j.chb.2014.05.046 Bada, M., Sasse, A. M., & Nurse, J. R. C. (2019). Cyber security awareness campaigns: Why do they fail to change behaviour? ArXiv Preprint. https://arxiv.org/abs/1901.02672 Clarke, N. L., & Furnell, S. M. (2012). Authentication of users on mobile telephones—A survey of attitudes and practices. Computers & Security, 31(4), 509–520. https://doi.org/10.1016/j.cose.2012.02.002 ENISA. (2023). Cybersecurity skills development in higher education. European Union Agency for Cybersecurity. https://www.enisa.europa.eu Garba, A., Ibrahim, A., & Musa, S. (2022). Cybersecurity awareness and digital safety practices among Nigerian university students. International Journal of Electrical and Computer Engineering, 12(4), 3841–3850. https://ijece.iaescore.com/index.php/IJECE/article/view/25441 Herath, T., & Rao, H. R. (2009). Protection motivation and deterrence: A framework for security policy compliance. European Journal of Information Systems, 18(2), 106– 125. https://doi.org/10.1057/ejis.2009.6 International Telecommunication Union . (2023). Global cybersecurity outlook 2023. https://www.itu.int ISO/IEC. (2022). ISO/IEC 27001: Information security management systems. International Organization for Standardization. https://www.iso.org Kaspersky. (2023). Cybersecurity education and awareness report. https://www.kaspersky.com McCormac, A., Zwaans, T., Parsons, K., Calic, D., Butavicius, M., & Pattinson, M. (2017). Individual differences and information security awareness. Computers & Security, 69, 151–166. https://doi.org/10.1016/j.cose.2017.04.006 National Information Technology Development Agency . (2019). Nigeria Data Protection Regulation . https://nitda.gov.ng Organisation for Economic Co-operation and Development . (2023). Cybersecurity risk management. https://www.oecd.org Parsons, K., McCormac, A., Butavicius, M., Pattinson, M., & Jerram, C. (2014). Determining employee awareness using the HAIS-Q. Computers & Security, 42, 165–176. https://doi.org/10.1016/j.cose.2013.12.003 Rogers, R. W. (1983). Cognitive and physiological processes in fear appeals and attitude change: A revised theory of protection motivation. Journal of Psychology, 91(1), 93– 114. https://doi.org/10.1080/00223980.1983.9915400 Sheng, S., Holbrook, M., Kumaraguru, P., Cranor, L. F., & Downs, J. (2010). Who falls for phish? Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, 373–382. https://doi.org/10.1145/1753326.1753383 Statista. (2024). Global cybercrime cost statistics. https://www.statista.com IJCSMT IJCSMT Ulven, J. B., & Wangen, G. (2025). A systematic review of cybersecurity awareness research. Applied Sciences, 12(5), 2589. https://doi.org/10.3390/app12052589 Utz, S., & Kramer, N. (2009). Privacy concerns and online behaviour. Journal of Computer- Mediated Communication, 14(4), 953–973. https://doi.org/10.1111/j.1083- 6101.2009.01470.x Verizon. (2024). Data breach investigations report. https://www.verizon.com/business/resources/reports World Economic Forum. (2024). Global risks report 2024. https://www.weforum.org Yamane, T. (1967). Statistics: An introductory analysis (2nd ed.). Harper & Row.Zwilling, M., Klien, G., Lesjak, D., Wiechetek, Ł., Çetin, F., & Basim, H. N. (2020). Cyber security awareness, knowledge and behaviour. Journal of Computer Information Systems, 62(1), 82–92. https://doi.org/10.1080/08874417.2020.1712269

More Articles from INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND MATHEMATICAL THEORY

Advances in Algorithmic Contract Scoring for Pre-Negotiation Yield Optimization and Risk Retention

Author: Ngozi Samuel Uzougbo, Michael Ominyi, Cyril Chimelie Anichukwueze, Blessing, Chika Jones

DevTest flow: Designing a Scalable Continuous Testing Pipeline for High-Velocity Software Delivery

Author: Lawal Ahmed Oladimeji, Achori Busayo, Akeju BusayoZainab, Saka Samson, Damilare, Mbah Demian Chidi, Runsewe Similoluwa Mayowa, Oladiti Luqman, Abiodun