From Awareness to Practice: Domain-Specific Information Security Awareness as a Predictor of Self-Reported Cybersecurity Practices among University Personnel

Awareness Domain	Mean	SD	Minimum	Maximum
Security Policy Awareness	3.45	0.773	1.40	5.00
Password Security Awareness	4.18	0.546	3.00	5.00
Phishing Awareness	3.69	0.834	1.00	5.00
Data Protection Awareness	3.52	0.794	1.00	5.00
Device Security Awareness	3.86	0.674	1.60	5.00
Social Engineering Awareness	3.33	0.825	1.20	5.00

1 Note. N = 160. Higher scores indicate stronger information security awareness. Values are based on a five-point Likert scale ranging from 1 = Strongly Disagree to 5 = Strongly Agree.

Table 2.

Descriptive Statistics for Self-Reported Cybersecurity Practice Domains

Cybersecurity Practice Domain	Mean	SD	Minimum	Maximum
Password Management Practices	3.76	0.729	1.80	5.00
Safe Browsing Practices	3.92	0.863	1.40	5.00
Data Protection Practices	2.90	1.003	1.00	4.80
Device Security Practices	3.63	0.888	1.80	5.00
Social Engineering Practices	4.15	0.791	1.40	5.00

1 Note. N = 160. Higher scores indicate more consistent self-reported implementation of cybersecurity practices. Values are based on a five-point Likert scale ranging from 1 = Strongly Disagree to 5 = Strongly Agree.

Table 3.

Pearson Correlation Matrix for Information Security Awareness Domains

Variable	1	2	3	4	5	6
1. Security Policy Awareness	-
2. Password Security Awareness	0.509^***	-
3. Phishing Awareness	0.451^***	0.593^***	-
4. Data Protection Awareness	0.596^***	0.723^***	0.774^***	-
5. Device Security Awareness	0.507^***	0.678^***	0.762^***	0.814^***	-
6. Social Engineering Awareness	0.466^***	0.509^***	0.721^***	0.696^***	0.699^***	-

1 Note. N = 160.

1*** p < 0.001.

Table 4.

Pearson Correlation Matrix for Self-Reported Cybersecurity Practice Domains

Variable	1	2	3	4	5
1. Password Management Practices	-
2. Safe Browsing Practices	0.594^***	-
3. Data Protection Practices	0.648^***	0.662^***	-
4. Device Security Practices	0.666^***	0.766^***	0.694^***	-
5. Social Engineering Practices	0.583^***	0.734^***	0.532^***	0.579^***	-

1 Note. N = 160.

1*** p < 0.001.

Table 5.

Simple Linear Regression Predicting Self-Reported Cybersecurity Practices from Overall Information Security Awareness

Predictor	B	SE	ß	t	p	95% CI for B	Tolerance	VIF
Intercept	0.524	0.2367	-	2.21	0.028	[0.0560, 0.991]	-	-
Overall Information
Security Awareness	0.857	0.0636	0.732	13.49	< 0.001	[0.7318, 0.983]	1.00	1.00

1 Note. N = 160. B = unstandardized coefficient; SE = standard error; β = standardized coefficient; CI = confidence interval; VIF = variance inflation factor. Model fit: R = 0.732, R² = 0.535.

Table 6.

Multiple Regression Predicting Self-Reported Cybersecurity Practices from Information Security Awareness Domains

Predictor	B	SE	β	t	p	95% CI for B	Tolerance	VIF
Intercept	0.3171	0.3242	-	0.978	0.330	[-0.3234, 0.958]	-	-
Security Policy Awareness	0.0702	0.0638	0.0749	1.100	0.273	[-0.0559, 0.196]	0.624	1.60
Password Security Awareness	0.2646	0.1073	0.1992	2.466	0.015	[0.0526, 0.477]	0.443	2.26
Phishing Awareness	0.2408	0.0838	0.2772	2.874	0.005	[0.0753, 0.406]	0.311	3.22
Data Protection Awareness	-0.0467	0.1053	-0.0511	-0.444	0.658	[-0.2547, 0.161]	0.217	4.60
Social Engineering Awareness	0.2374	0.0739	0.2701	3.213	0.002	[0.0914, 0.383]	0.409	2.45
Device Security Awareness	0.1275	0.1116	0.1185	1.142	.0255	[-0.0931, 0.348]	0.268	3.73

1 Note. N = 160. B = unstandardized coefficient; SE = standard error; β = standardized coefficient; CI = confidence interval; VIF = variance inflation factor. Model fit: R = 0.747, R² = 0.558, Adjusted R² = 0.541.

References

Authors

Metrics

Articles in this issue

DOI: https://doi.org/10.2478/ias-2026-0009 | Journal eISSN: 1554-1029 | Journal ISSN: 1554-1010

Journal RSS Feed

Language: English

Page range: 173 - 190

Published on: Jul 8, 2026

Published by: Cerebration Science Publishing Co., Limited

In partnership with: Paradigm Publishing Services

Publication frequency: Volume open

Keywords:

information security awareness,

cybersecurity practices,

self-reported cybersecurity readiness,

human factors in cybersecurity,

higher education cybersecurity,

security behavior

Related subjects:

Computer sciences,

Fundamentals of computer sciences,

Theoretical computer sciences,

IT-security and cryptology

© 2026 Noli B. Lucila, published by Cerebration Science Publishing Co., Limited
This work is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0 License.

Volume 21 (2026): Issue 3 (July 2026)

From Awareness to Practice: Domain-Specific Information Security Awareness as a Predictor of Self-Reported Cybersecurity Practices among University Personnel

Figures & Tables

Figure 1.

Table 1.

Table 2.

Table 3.

Table 4.

Table 5.

Table 6.

Paradigm

My account