01672nas a2200229 4500000000100000000000100001008004100002260000900043653002700052653002800079653002800107653002800135653003200163653002500195100001600220700002000236700001800256245008800274300001200362490000700374520106100381 2020 d c202010acybersecurity attitude10acybersecurity awareness10acybersecurity behaviour10acybersecurity knowledge10acybersecurity questionnaire10aInformation Security1 aLisa de Kok1 aDeborah Oosting1 aMarcel Spruit00aThe Influence of Knowledge and Attitude on Intention to Adopt Cybersecure Behaviour a251-2660 v463 a

In general, people are poorly protected against cyberthreats, with the main reason being user behaviour. For the study described in this paper, a questionnaire was developed in order to understand how people’s knowledge of and attitude towards both cyberthreats and cyber security controls affect intention to adopt cybersecure behaviour. The study divides attitude into a cognitive and an affective component. Although only the cognitive component of attitude is usually studied, the results from a questionnaire of 300 respondents show that both the affective and cognitive components of attitude have a clearly positive, albeit varying, influence on behavioural intention, with the affective component having an even greater effect on attitude than the cognitive aspect. No correlation was found between knowledge and behavioural intention. The results indicate that attitude is an important factor to include when developing behavioural interventions, but also that different kinds of attitude should be addressed differently in interventions.