Human Factors and Cybersecurity Awareness in Pakistani Universities: A Behavioral and Risk Analysis Study

Abstract

Cybersecurity has become a major challenge in Pakistani universities due to the speedy digital transformation. In the context of universities, they exist in a very open digital space, with students, faculty, administrative staff and even IT personnel all accessing university systems on regular basis via interconnected networks and their personal devices. This study focuses on the impact of human factors on the cybersecurity awareness and vulnerabilities in Pakistani Universities. The research examines the primary cyber threats such as phishing attacks, use of weak passwords, ransomware, social engineering, credential sharing and unauthorized access to institutional systems. Descriptive and analytical research design was used in the study, and behavioral risk analysis, survey and semi-structured interviews were employed to assess cybersecurity awareness and risky practices of University Stakeholders. The results indicate that factors such as low cybersecurity awareness, insufficient institutional training, weak policy enforcement and unsafe online behaviors play a major role in the cybersecurity vulnerabilities in academic environments. The study states that technical security systems are not enough if there are no continuous awareness programs and behavioral training. Therefore, a human-centred cybersecurity awareness framework is suggested to enhance the cyber security resilience and encourage secure digital practices in Pakistani universities.