10th International Congress on Information and Communication Technology

Authors - Esther Endjala, Hanifa Abdullah, Mathias Mujinga
Abstract - This paper explores the theoretical and strategic foundations for cultivating a cybersecurity culture within telecommunications institutions. Drawing on established behavioral theories Social Cognitive Theory (SCT), Protection Motivation Theory (PMT), Theory of Planned Behavior (TPB), and Technology Acceptance Model (TAM) it examines the opportunities for enhancing cybersecurity awareness and transforming employee behaviors into a resilient human firewall. The paper synthesizes existing literature to highlight the role of leadership, employee engagement, training, collaboration, and recognition in fostering a cybersecurity culture. The review further identifies gaps and limitations in the current approaches, proposing a conceptual foundation for developing an effective cybersecurity culture framework tailored to telecommunications institutions. Appropriate cybersecurity culture is essential in developing the entity and helps protect organizational assets such as data, networks, and systems when technical defenses are quite significant. The section takes into consideration the theoretical aspect of cybersecurity culture and comes out with a derived underlying framework that incorporates aspects like the Social Cognitive Theory, Protection Motivation Theory, Theory of Planned Behavior, and Technology Acceptance Model. Creating a strong cybersecurity culture faces several significant challenges, including resistance to change, limited resources, and regulatory hurdles. The proposed framework emphasizes the importance of top management commitment, employee involvement, ongoing training, and interdepartmental collaboration as vital components for cultivating this culture. Organizations should address these challenges to successfully establish an effective cybersecurity culture. By integrating these elements, cybersecurity can become a fundamental organizational value, enhancing awareness, compliance, and employee engagement. This paper establishes the groundwork for further research on cybersecurity culture and outlines key steps to strengthen organizational resilience and ensure a safe digital environment.