Investigating the Role of Mindful Awareness as an Antecedent of University Students’ Cyber Security Behaviors

Abstract

Technology, while enhancing efficiency and effectiveness, also poses significant cyber threats and risks. Overcoming these challenges necessitates individuals to have high levels of cybersecurity awareness and to exhibit proper cybersecurity behaviors. Correspondingly, in recent years, the exploration of individual factors influencing cybersecurity behaviors has become a popular topic in the relevant literature. Building upon this, the present study examines the predictive effect of mindful awareness on the cybersecurity behaviors of undergraduate students, a group deeply intertwined with technology and hence potentially exposed to cyber risks. Conducted using a relational survey methodology, the study involved 179 undergraduate students enrolled in a state university during the academic year 2022-2023. Data for the study were collected through an online form utilizing the "Personal Cyber Security Provision Scale" and the "Mindful Attention Awareness Scale." Results showed no significant differences in cybersecurity behaviors between male and female students. Department differences in cybersecurity behavior were only observed between Elementary Mathematics Teacher Education and Turkish Language Teacher Education, with students in the former exhibiting better behaviors. No differences in cybersecurity behaviors were found across grade levels. Also, a moderate positive correlation was found between mindful awareness and cybersecurity behaviors, with mindful awareness explaining 9.4% of the variance in cybersecurity behaviors. Finally, the investigation of moderating effects revealed that gender, department, and grade level did not significantly influence this effect. Practical and theoretical recommendations are provided based on these findings.

Keywords

• Mindful awareness
• Mindfulness
• Cyber security
• Cyber security behaviors
• Undergraduate students

References

1. Abawajy, J. (2014). User preference of cyber security awareness delivery methods. Behaviour & Information Technology, 33(3), 237-248. https://doi.org/10.1080/0144929X.2012.708787
2. Achuthan, K., Nair, V. K., Kowalski, R., Ramanathan, S., & Raman, R. (2023). Cyberbullying research - Alignment to sustainable development and impact of COVID-19: Bibliometrics and science mapping analysis. Computers in Human Behavior, 140, 107566. https://doi.org/10.1016/j.chb.2022.107566
3. Akgün, Ö. E., & Topal, M. (2015). Eğitim fakültesi son sınıf öğrencilerinin bilişim güvenliği farkındalıkları: Sakarya Üniversitesi Eğitim Fakültesi örneği [Information security awareness of the senior teacher students: Sakarya University sample]. Sakarya University Journal of Education, 5(2), 98-121. https://doi.org/10.19126/suje.73391
4. Akman, T. P., & Demir, M. (2021). Üniversite öğrencilerinin bilinçli farkındalıkları ile bilişsel esneklikleri arasındaki ilişki [The relationship between mindfulness and cognitive flexibility of university students]. Yaşam Becerileri Psikoloji Dergisi, 5(9), 11-20. https://doi.org/10.31461/ybpd.879554
5. Aksoğan, M., Bayer, H., Gülada, M. O., & Çelik, E. (2024). İletişim fakültesi öğrencilerinin siber güvenlik farkındalığı: İnönü üniversitesi örneği [Cyber security awareness of the students of the faculty of communication: İnönü University sample]. Kesit Akademi Dergisi, 13, 271-288. https://dergipark.org.tr/en/pub/kesitakademi/issue/59829/864303
6. Alper, R., Akpınar, S., & Akpınar, Ö. (2021). Spor bilimleri fakültesi öğrencilerinin bilinçli farkındalık düzeylerinin belirlenmesi [Determining the levels of mindfulness of the students of the faculty of sports sciences]. Düzce Üniversitesi Spor Bilimleri Dergisi, 1(1), 1-8. https://dergipark.org.tr/tr/pub/dujoss/issue/67645/1041330
7. Alanazi, M., Freeman, M., & Tootell, H. (2022). Exploring the factors that influence the cybersecurity behaviors of young adults. Computers in Human Behavior, 136, 107376. https://doi.org/10.1016/j.chb.2022.107376
8. Alpar, R. (2013). Uygulamalı çok değişkenli istatistiksel yöntemler (4th ed.) [Applied multivariate statistical methods (4th ed.)]. Detay Yayıncılık.

9. Alsharida, R. A., Al-rimy, B. A. S., Al-Emran, M., & Zainal, A. (2023). A systematic review of multi perspectives on human cybersecurity behavior. Technology in Society, 102258. https://doi.org/10.1016/j.techsoc.2023.102258
10. Al-Balushi, A., Tarhini, A., Acikgoz, F., & Ali, S. (2023). Examining the factors that influence user information security behavior toward COVID-19 scams. International Journal of Human-Computer Interaction, 1-18. https://doi.org/10.1080/10447318.2023.2291608
11. Arslan, G. (2017). Psychological maltreatment, forgiveness, mindfulness, and internet addiction among young adults: A study of mediation effect. Computers in Human Behavior, 72, 57-66. https://doi.org/10.1016/j.chb.2017.02.037
12. Arslan, I. (2018). Bilinçli farkındalık, depresyon düzeyleri ve algılanan stres arasındaki ilişki [The relationship between mindfulness, levels of depression, and perceived stress]. Birey ve Toplum Sosyal Bilimler Dergisi, 8(2), 73-86. https://doi.org/10.20493/birtop.477445
13. Avcı, Ü., & Oruç, O. (2020). Üniversite öğrencilerinin kişisel siber güvenlik davranışları ve bilgi güvenliği farkındalıklarının incelenmesi [Investigation of the students’ personal cyber security behaviour and information security awareness]. İnönü Üniversitesi Eğitim Fakültesi Dergisi, 21(1), 284-303. https://doi.org/10.17679/inuefd.526390
14. Bekirler, A., & Bilaloğlu, R. G. (2022). Relationships between preschool teachers' cognitive flexibility, mindfulness, and self-efficacy. Ege Eğitim Dergisi, 23(3), 301-318. https://doi.org/10.12984/egeefd.1084301
15. Bishop, S. R. (2002). What do we really know about mindfulness-based stress reduction?. Psychosomatic Medicine, 64(1), 71-83. https://doi.org/10.1097/00006842-200201000-00010
16. Bramm, S. M., Cohn, A. M., & Hagman, B. T. (2013). Can preoccupation with alcohol override the protective properties of mindful awareness on problematic drinking?. Addictive Disorders & Their Treatment, 12(1), 19-27. https://doi.org/10.1097/ADT.0b013e31824c886b
17. Bryman, A., & Cramer, D. (2002). Quantitative data analysis with SPSS release 10 for Windows: A guide for social scientists. Routledge. https://doi.org/10.4324/9780203471548
18. Brown, K. W., & Ryan, R. M. (2003). The benefits of being present: Mindfulness and its role in psychological well-being. Journal of Personality and Social Psychology, 84(4), 822. https://doi.org/10.1037/0022-3514.84.4.822
19. Büyüköztürk, Ş. (2007). Sosyal bilimler için veri analizi el kitabı [Data analysis handbook for social sciences]. Ankara: Pegem A Yayıncılık.
20. Chatzisarantis, N. L., & Hagger, M. S. (2007). Mindfulness and the intention-behavior relationship within the theory of planned behavior. Personality and Social Psychology Bulletin, 33(5), 663-676. https://doi.org/10.1177/0146167206297401
21. Chen, X., Wu, D., Chen, L., & Teng, J. K. (2018). Sanction severity and employees’ information security policy compliance: Investigating mediating, moderating, and control variables. Information & Management, 55(8), 1049-1060. https://doi.org/10.1016/j.im.2018.05.011
22. Çalışkan, F. C., Akmehmet-Şekerler, S., Kızıltepe, Z., Aydın Sünbül, Z., & Börkan, B. (2024). The mediating role of depression and anxiety on the relationship between mindfulness and college adjustment. British Journal of Guidance & Counselling, 52(4), 613-627. https://doi.org/10.1080/03069885.2023.2220896
23. Chen, Y. T., Shih, W. L., Lee, C. H., Wu, P. L., & Tsai, C. Y. (2021). Relationships among undergraduates' problematic information security behavior, compulsive internet use, and mindful awareness in Taiwan. Computers & Education, 164, 104131. https://doi.org/10.1016/j.compedu.2021.104131
24. Deniz, M. E., Erus, S. M., & Büyükcebeci, A. (2017). Bilinçli farkındalık ile psikolojik iyi oluş ilişkisinde duygusal zekanın aracılık rolü [Relationship between mindfulness and psychological well-being: The mediating role of emotional intelligence]. Turkish Psychological Counseling and Guidance Journal, 7(47), 17-31. https://dergipark.org.tr/en/pub/tpdrd/issue/42743/515880
25. Fraenkel, J., Wallen, N. ve Hyun, H. (2012). How to design and evaluate research in education. 8th edition. Columbus, OH: McGraw-Hill.
26. Franco, C., Amutio, A., López-González, L., Oriol, X., & Martínez-Taboada, C. (2016). Effect of a mindfulness training program on the impulsivity and aggression levels of adolescents with behavioral problems in the classroom. Frontiers in Psychology, 7, 1385. https://doi.org/10.3389/fpsyg.2016.01385
27. Frauenstein, E. D., & Flowerday, S. (2020). Susceptibility to phishing on social network sites: A personality information processing model. Computers & Security, 94, 101862. https://doi.org/10.1016/j.cose.2020.101862
28. Gámez-Guadix, M., & Calvete, E. (2016). Assessing the relationship between mindful awareness and problematic Internet use among adolescents. Mindfulness, 7, 1281-1288. https://doi.org/10.1007/s12671-016-0566-0
29. Gautam, A., & Mathur, R. (2018). Influence of mindfulness on decision making and psychological flexibility among aircrew. Journal of Psychosocial Research, 13(1), 199-207. https://doi.org/10.32381/JPR.2018.13.01.19
30. Gerdenitsch, C., Wurhofer, D., & Tscheligi, M. (2023). Working conditions and cybersecurity: Time pressure, autonomy and threat appraisal shaping employees’ security behavior. Cyberpsychology: Journal of Psychosocial Research on Cyberspace, 17(4). https://doi.org/10.5817/CP2023-4-7
31. Goilean, C., Gracia, F. J., & Tomás, I. (2023). Clarifying the relationship between trait mindfulness and objective performance. Current Psychology, 42(14), 12241-12256. https://doi.org/10.1007/s12144-021-02414-y
32. Gratian, M., Bandi, S., Cukier, M., Dykstra, J., & Ginther, A. (2018). Correlating human traits and cyber security behavior intentions. Computers & Security, 73, 345-358. https://doi.org/10.1016/j.cose.2017.11.015
33. Gültekin, V., & Özel, N. (2023). Üniversite öğrencilerinin bilgi güvenliği farkındalığı: Ankara Üniversitesi örneği [Information security awareness of university students: Example of Ankara University]. Bilgi Yönetimi, 6(2), 310-331. https://doi.org/10.33721/by.1366855
34. Hanh, T. N. (1976). Miracle of mindfulness. Boston: Beacon.
35. Hu, L. T., & Bentler, P. M. (1999). Cutoff criteria for fit indexes in covariance structure analysis: Conventional criteria versus new alternatives. Structural Equation Modeling: A Multidisciplinary Journal, 6(1), 1-55. https://doi.org/10.1080/10705519909540118
36. Jansen, J., & Van Schaik, P. (2017). Comparing three models to explain precautionary online behavioural intentions. Information & Computer Security, 25(2), 165-180. https://doi.org/10.1108/ICS-03-2017-0018
37. Jensen, M. L., Dinger, M., Wright, R. T., & Thatcher, J. B. (2017). Training to mitigate phishing attacks using mindfulness techniques. Journal of Management Information Systems, 34(2), 597-626. https://doi.org/10.1080/07421222.2017.1334499
38. Kahneman, D. (2011). Fast and slow thinking. Farrar, Straus and Giroux, New York, USA. Karacı, A., Akyüz, H. İ. ve Bilgici, G. (2017). Üniversite öğrencilerinin siber güvenlik davranışlarının incelenmesi [Investigation of cyber security behaviors of university students]. Kastamonu Eğitim Dergisi, 25(6), 2079-2094. https://doi.org/10.24106/kefdergi.351517
39. Karaoğlan-Yılmaz, F. G., Yılmaz, R., & Sezer, B. (2014). Üniversite öğrencilerinin güvenli bilgi ve iletişim teknolojisi kullanım davranışları ve bilgi güvenliği eğitimine genel bir bakış [Secure information and communication technology usage behavior of university students and an overview to information security training]. Bartın University Journal of Faculty of Education, 3(1), 176-199. https://dergipark.org.tr/en/pub/buefad/issue/3814/51178
40. Karasar, N. (2011). Bilimsel araştırma yöntemleri (25. Basım). Nobel Yayınevi. Keser, H., & Güldüren, C. (2015). Bilgi güvenliği farkindalik ölçeği (BGFÖ) geliştirme [Development of information security awareness scale]. Kastamonu Eğitim Dergisi, 23(3), 1167-1184. https://dergipark.org.tr/en/pub/kefdergi/issue/22598/241397
41. Kovačević, A., Putnik, N., & Tošković, O. (2020). Factors related to cyber security behavior. IEEE Access, 8, 125140-125148. https://doi.org/10.1109/ACCESS.2020.3007867
42. Lallie, H. S., Shepherd, L. A., Nurse, J. R., Erola, A., Epiphaniou, G., Maple, C., & Bellekens, X. (2021). Cyber security in the age of COVID-19: A timeline and analysis of cyber-crime and cyber-attacks during the pandemic. Computers & Security, 105, 102248. https://doi.org/10.1016/j.cose.2021.102248
43. Lan, Y., Ding, J. E., Li, W., Li, J., Zhang, Y., Liu, M., & Fu, H. (2018). A pilot study of a group mindfulness-based cognitive-behavioral intervention for smartphone addiction among university students. Journal of Behavioral Addictions, 7(4), 1171-1176. https://doi.org/10.1556/2006.7.2018.103
44. Langer, E. J. (2016). The power of mindful learning. Hachette UK.
45. Leary, M. R., Adams, C. E., & Tate, E. B. (2006). Hypo‐egoic self‐regulation: Exercising self‐control by diminishing the influence of the self. Journal of Personality, 74(6), 1803-1832. https://doi.org/10.1111/j.1467-6494.2006.00429.x
46. Li, W., Garland, E. L., McGovern, P., O'brien, J. E., Tronnier, C., & Howard, M. O. (2017). Mindfulness-oriented recovery enhancement for internet gaming disorder in US adults: A stage I randomized controlled trial. Psychology of Addictive Behaviors, 31(4), 393. https://doi.org/10.1037/adb0000269
47. Liu, S., Liu, Y., & Ni, Y. (2018). A review of mindfulness improves decision making and future prospects. Psychology, 9(2), 229-248. https://doi.org/10.4236/psych.2018.92015
48. Martens, M., De Wolf, R., & De Marez, L. (2019). Investigating and comparing the predictors of the intention towards taking security measures against malware, scams and cybercrime in general. Computers in Human Behavior, 92, 139-150. https://doi.org/10.1016/j.chb.2018.11.002
49. Merhi, M. I., & Ahluwalia, P. (2019). Examining the impact of deterrence factors and norms on resistance to information systems security. Computers in Human Behavior, 92, 37-46. https://doi.org/10.1016/j.chb.2018.10.031
50. Misra, G., Singh, P., Ramakrishna, M., & Ramanathan, P. (2022). Technology as a double-edged sword: Understanding life experiences and coping with COVID-19 in India. Frontiers in Psychology, 12, 800827. https://doi.org/10.3389/fpsyg.2021.800827
51. Moore, R. (2014). Cybercrime: Investigating high-technology computer crime. Routledge. https://doi.org/10.4324/9781315721767
52. Murphy, C., & MacKillop, J. (2012). Living in the here and now: Interrelationships between impulsivity, mindfulness, and alcohol misuse. Psychopharmacology, 219, 527-536. https://doi.org/10.1007/s00213-011-2573-0
53. Naqvi, B., Perova, K., Farooq, A., Makhdoom, I., Oyedeji, S., & Porras, J. (2023). Mitigation strategies against the phishing attacks: A systematic literature review. Computers & Security, 103387. https://doi.org/10.1016/j.cose.2023.103387
54. Nederhof, A. J. (1985). Methods of coping with social desirability bias: A review. European Journal of Social Psychology, 15(3), 263-280. https://doi.org/10.1002/ejsp.2420150303
55. NICCS (2018). Explore terms: A glossary of common cybersecurity words and phrases. Retrieved April 24, 2024 from https://niccs.cisa.gov/cybersecurity-career-resources/vocabulary
56. Nunnally, J. C. (1994). Psychometric theory 3E. Tata McGraw-Hill Education.
57. Özyeşil, Z., Arslan, C., Kesici, Ş., & Deniz, M. E. (2011). Bilinçli farkındalık ölçeği’ni Türkçeye uyarlama çalışması [Adaptation of the mindful attention awareness scale into Turkish]. Eğitim ve Bilim, 36(160), 224-235. https://eb.ted.org.tr/index.php/EB/article/view/697
58. Paliszkiewicz, J. (2019). Information security policy compliance: Leadership and trust. Journal of Computer Information Systems, 59(3), 211-217. https://doi.org/10.1080/08874417.2019.1571459
59. Peters, J. R., Erisman, S. M., Upton, B. T., Baer, R. A., & Roemer, L. (2011). A preliminary investigation of the relationships between dispositional mindfulness and impulsivity. Mindfulness, 2, 228-235. https://doi.org/10.1007/s12671-011-0065-2
60. Reynolds, B., Ortengren, A., Richards, J. B., & De Wit, H. (2006). Dimensions of impulsive behavior: Personality and behavioral measures. Personality and Individual Differences, 40(2), 305-315. https://doi.org/10.1016/j.paid.2005.03.024
61. Rogers, R. W. (1975). A protection motivation theory of fear appeals and attitude change. The Journal of Psychology, 91(1), 93-114. https://doi.org/10.1080/00223980.1975.9915803
62. Sarıtepeci, M., Yıldız-Durak, H., Özüdoğru, G., & Atman-Uslu, N. (2024). The role of digital literacy and digital data security awareness in online privacy concerns: A multi-group analysis with gender. Online Information Review, (ahead-of-print). https://doi.org/10.1108/OIR-03-2023-0122
63. Seki, T., Çimen, F., & Dilmaç, B. (2023). The effect of emotional intelligence on cyber security: The mediator role of mindfulness. Bartın University Journal of Faculty of Education, 12(1), 190-199. https://doi.org/10.14686/buefad.1040614
64. Semple, R. J., Lee, J., Rosa, D., & Miller, L. F. (2010). A randomized trial of mindfulness-based cognitive therapy for children: Promoting mindful attention to enhance social-emotional resiliency in children. Journal of Child and Family Studies, 19, 218-229. https://doi.org/10.1007/s10826-009-9301-y
65. Shapiro, S. L., Jazaieri, H., & Goldin, P. R. (2012). Mindfulness-based stress reduction effects on moral reasoning and decision making. The Journal of Positive Psychology, 7(6), 504-515. https://doi.org/10.1080/17439760.2012.723732
66. Sommestad, T., Karlzén, H., & Hallberg, J. (2015). The sufficiency of the theory of planned behavior for explaining information security policy compliance. Information & Computer Security, 23(2), 200-217. http://doi.org/10.1108/ICS-04-2014-0025
67. STATISTA (2024a). Internet usage worldwide - statistics & facts. Retrieved April 11, 2024 from https://www.statista.com/topics/1145/internet-usage-worldwide.
68. STATISTA (2024b). Mobile internet usage worldwide - statistics & facts. Retrieved April 11, 2024 from https://www.statista.com/topics/779/mobile-internet.
69. STATISTA (2024c). Social media - statistics & facts. Retrieved April 11, 2024 from https://www.statista.com/topics/1164/social-networks.
70. Stratton, K. J. (2006). Mindfulness-based approaches to impulsive behaviors. The New School Psychology Bulletin, 4(2), 49-71. https://nspb.net/index.php/nspb/article/view/145/81
71. Subramaniam, S. R. (2017). Cyber security awareness among Malaysian pre-university students. Proceeding of the 6th Global Summit on Education, 1-14.
72. Sulaiman, N. S., Fauzi, M. A., Hussain, S., & Wider, W. (2022). Cybersecurity behavior among government employees: The role of protection motivation theory and responsibility in mitigating cyberattacks. Information, 13(9), 413-430. https://doi.org/10.3390/info13090413
73. Tabachnick, B. G., & Fidell, L. S. (2007). Multivariate analysis of variance and covariance. Using Multivariate Statistics, 3, 402-407.
74. Tabachnick, B. G., & Fidell, L. S. (2013). Using multivariate statistics. 6th ed. Boston, MA: Pearson Education.
75. Tekerek, M., & Tekerek, A. (2013). A research on students’ information security awareness. Turkish Journal of Education, 2(3), 61-70.
76. Thompson, N., McGill, T. J., & Wang, X. (2017). “Security begins at home”: Determinants of home computer and mobile device security behavior. Computers & Security, 70, 376-391. https://doi.org/10.1016/j.cose.2017.07.003
77. Tokmak, M. (2023). Öğrencilerin siber güvenlik farkındalık düzeylerinin makine öğrenmesi yöntemleri ile belirlenmesi [Determination of cyber security awareness levels of students with machine learning methods]. Yüzüncü Yıl Üniversitesi Fen Bilimleri Enstitüsü Dergisi, 28(2), 451-466. https://doi.org/10.53433/yyufbed.1181694
78. Verhaeghen, P. (2021). Mindfulness as attention training: Meta-analyses on the links between attention performance and mindfulness interventions, long-term meditation practice, and trait mindfulness. Mindfulness, 12, 564-581. https://doi.org/10.1007/s12671-020-01532-1
79. Verkijika, S. F. (2019). “If you know what to do, will you take action to avoid mobile phishing attacks”: Self-efficacy, anticipated regret, and gender. Computers in Human Behavior, 101, 286-296. https://doi.org/10.1016/j.chb.2019.07.034
80. Vihari, N. S., Sinha, N. K., Tyagi, A., & Mittal, S. (2022). Effect of mindfulness on online impulse buying: Moderated mediation model of problematic internet use and emotional intelligence. Frontiers in Psychology, 13, 1012331. https://doi.org/10.3389/fpsyg.2022.1012331
81. Wu, D. (2020). Empirical study of knowledge withholding in cyberspace: Integrating protection motivation theory and theory of reasoned behavior. Computers in Human Behavior, 105, 106229. https://doi.org/10.1016/j.chb.2019.106229
82. Yan, Z., Robertson, T., Yan, R., Park, S. Y., Bordoff, S., Chen, Q., & Sprissler, E. (2018). Finding the weakest links in the weakest link: How well do undergraduate students make cybersecurity judgment?. Computers in Human Behavior, 84, 375-382. https://doi.org/10.1016/j.chb.2018.02.019
83. Yıldız-Durak, H. (2019). Human factors and cybersecurity in online game addiction: An analysis of the relationship between high school students' online game addiction and the state of providing personal cybersecurity and representing cyber human values in online games. Social Science Quarterly, 100(6), 1984-1998. https://doi.org/10.1111/ssqu.12693
84. Yiğit, M. F., & Seferoğlu, S. S. (2019). Öğrencilerin siber güvenlik davranışlarının beş faktör kişilik özellikleri ve çeşitli diğer değişkenlere göre incelenmesi [Investigating students’ cyber security behaviors in relation to big five personality traits and other various variables]. Mersin Üniversitesi Eğitim Fakültesi Dergisi, 15(1), 186-215. https://doi.org/10.17860/mersinefd.437610
85. Yiğit, M. F., & Seferoğlu, S. S. (2020). Bireylerin siber güvenlik davranışlarını etkileyen faktörler üzerine bir inceleme [An examination of factors influencing individuals' cybersecurity behaviors]. H. F. Odabaşı, B.
86. Akkoyunlu & A. İşman (Ed). Eğitim teknolojileri okumaları 2020 (4. Bölüm, ss. 55-75). Pegem Akademi, Ankara.
87. Zimmerman, B. J. (2002). Becoming a self-regulated learner: An overview. Theory into Practice, 41(2), 64-70. https://doi.org/10.1207/s15430421tip4102_2
88. Zorlu, E. (2023). An examination of the relationship between college students’ cyberbullying awareness and ability to ensure their personal cybersecurity. Journal of Learning and Teaching in Digital Age, 8(1), 55-70. https://doi.org/10.53850/joltida.1087377