From Awareness to Practice: Domain-Specific Information Security Awareness as a Predictor of Self-Reported Cybersecurity Practices among University Personnel

Noli B. Lucila

doi:10.2478/ias-2026-0009

.blurhash-client-img { display: none !important; }

From Awareness to Practice: Domain-Specific Information Security Awareness as a Predictor of Self-Reported Cybersecurity Practices among University Personnel

Journal of Information Assurance and Security

Volume 21 (2026): Issue 3 (July 2026)

By: Noli B. Lucila

Open Access

|Jul 2026

Figures & Tables

Conceptual Framework of Information Security Awareness and Self-Reported Cybersecurity Practices

Simple Linear Regression Predicting Self-Reported Cybersecurity Practices from Overall Information Security Awareness

Predictor	B	SE	ß	t	p	95% CI for B	Tolerance	VIF
Intercept	0.524	0.2367	-	2.21	0.028	[0.0560, 0.991]	-	-
Overall Information
Security Awareness	0.857	0.0636	0.732	13.49	< 0.001	[0.7318, 0.983]	1.00	1.00

Descriptive Statistics for Self-Reported Cybersecurity Practice Domains

Cybersecurity Practice Domain	Mean	SD	Minimum	Maximum
Password Management Practices	3.76	0.729	1.80	5.00
Safe Browsing Practices	3.92	0.863	1.40	5.00
Data Protection Practices	2.90	1.003	1.00	4.80
Device Security Practices	3.63	0.888	1.80	5.00
Social Engineering Practices	4.15	0.791	1.40	5.00

Multiple Regression Predicting Self-Reported Cybersecurity Practices from Information Security Awareness Domains

Predictor	B	SE	β	t	p	95% CI for B	Tolerance	VIF
Intercept	0.3171	0.3242	-	0.978	0.330	[-0.3234, 0.958]	-	-
Security Policy Awareness	0.0702	0.0638	0.0749	1.100	0.273	[-0.0559, 0.196]	0.624	1.60
Password Security Awareness	0.2646	0.1073	0.1992	2.466	0.015	[0.0526, 0.477]	0.443	2.26
Phishing Awareness	0.2408	0.0838	0.2772	2.874	0.005	[0.0753, 0.406]	0.311	3.22
Data Protection Awareness	-0.0467	0.1053	-0.0511	-0.444	0.658	[-0.2547, 0.161]	0.217	4.60
Social Engineering Awareness	0.2374	0.0739	0.2701	3.213	0.002	[0.0914, 0.383]	0.409	2.45
Device Security Awareness	0.1275	0.1116	0.1185	1.142	.0255	[-0.0931, 0.348]	0.268	3.73

Descriptive Statistics for Information Security Awareness Domains

Awareness Domain	Mean	SD	Minimum	Maximum
Security Policy Awareness	3.45	0.773	1.40	5.00
Password Security Awareness	4.18	0.546	3.00	5.00
Phishing Awareness	3.69	0.834	1.00	5.00
Data Protection Awareness	3.52	0.794	1.00	5.00
Device Security Awareness	3.86	0.674	1.60	5.00
Social Engineering Awareness	3.33	0.825	1.20	5.00

Pearson Correlation Matrix for Information Security Awareness Domains

Variable	1	2	3	4	5	6
1. Security Policy Awareness	-
2. Password Security Awareness	0.509^***	-
3. Phishing Awareness	0.451^***	0.593^***	-
4. Data Protection Awareness	0.596^***	0.723^***	0.774^***	-
5. Device Security Awareness	0.507^***	0.678^***	0.762^***	0.814^***	-
6. Social Engineering Awareness	0.466^***	0.509^***	0.721^***	0.696^***	0.699^***	-

Pearson Correlation Matrix for Self-Reported Cybersecurity Practice Domains

Variable	1	2	3	4	5
1. Password Management Practices	-
2. Safe Browsing Practices	0.594^***	-
3. Data Protection Practices	0.648^***	0.662^***	-
4. Device Security Practices	0.666^***	0.766^***	0.694^***	-
5. Social Engineering Practices	0.583^***	0.734^***	0.532^***	0.579^***	-

References

Authors

Metrics

Articles in this issue

DOI: https://doi.org/10.2478/ias-2026-0009 | Journal eISSN: 1554-1029 | Journal ISSN: 1554-1010

Journal RSS Feed

Language: English

Page range: 173 - 190

Published on: Jul 8, 2026

Published by: Cerebration Science Publishing Co., Limited

In partnership with: Paradigm Publishing Services

Publication frequency: 6 issues per year

Keywords:

information security awareness,

cybersecurity practices,

self-reported cybersecurity readiness,

human factors in cybersecurity,

higher education cybersecurity,

security behavior

Related subjects:

Computer sciences,

Fundamentals of computer sciences,

Theoretical computer sciences,

IT-security and cryptology

© 2026 Noli B. Lucila, published by Cerebration Science Publishing Co., Limited
This work is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0 License.

Volume 21 (2026): Issue 3 (July 2026)

From Awareness to Practice: Domain-Specific Information Security Awareness as a Predictor of Self-Reported Cybersecurity Practices among University Personnel

Figures & Tables

Figure 1.

Simple Linear Regression Predicting Self-Reported Cybersecurity Practices from Overall Information Security Awareness

Descriptive Statistics for Self-Reported Cybersecurity Practice Domains

Multiple Regression Predicting Self-Reported Cybersecurity Practices from Information Security Awareness Domains

Descriptive Statistics for Information Security Awareness Domains

Pearson Correlation Matrix for Information Security Awareness Domains

Pearson Correlation Matrix for Self-Reported Cybersecurity Practice Domains

Paradigm

My account