1. Home
  2. Vol 14, No 1 (2026)
  3. Saputra

The Effects of Perceived Threat and Perceived Vulnerability on Security Awareness through Cybersecurity Engagement

Hadi Kurnia Saputra(1), M Giatman(2), Hasan Maksum(3), Remon Lapisa(4), Nurindah Dwiyani(5),
(1) Universitas Negeri Padang  Indonesia
(2) Universitas Negeri Padang  Indonesia
(3) Universitas Negeri Padang  Indonesia
(4) Universitas Negeri Padang  Indonesia
(5) STIP Jakarta  Indonesia

Corresponding Author


DOI : https://doi.org/10.24036/voteteknika.v14i1.137124

Abstract


Digital transformation has significantly increased students’ reliance on information technology, while simultaneously exposing them to various cybersecurity threats. This condition makes security awareness a critical factor in ensuring individual digital safety. This study aims to examine the effects of perceived threat and perceived vulnerability on security awareness, with cybersecurity engagement as a mediating variable. A quantitative approach with an explanatory survey design was employed. Data were collected through an online questionnaire from 134 undergraduate students at Universitas Negeri Padang aged 18–24 years and analyzed using Partial Least Squares–Structural Equation Modeling (PLS-SEM). The results indicate that perceived threat and perceived vulnerability have positive effects on cybersecurity engagement. Furthermore, cybersecurity engagement is found to have a positive and significant effect on security awareness. Mediation analysis reveals that cybersecurity engagement significantly mediates the relationship between perceived threat and perceived vulnerability and security awareness. These findings suggest that security awareness is not formed passively but develops through active engagement in cybersecurity-related activities driven by risk perception and personal vulnerability. This study provides practical implications for higher education institutions to design cybersecurity initiatives that not only enhance risk awareness but also encourage active student participation in digital security practices.

References


L. M. Ganiem, R. Setiawati, S. Suardi, N. Nurhayai, and R. Ramdhani, “Society in the Digital Era: Adaptation, Change, and Response to Communication Technology,” J. Int. Dakwah Commun., vol. 4, no. 1, pp. 123–135, June 2024, doi: 10.55849/jidc.v4i1.639.

K. Martzoukou, C. Fulton, P. Kostagiolas, and C. Lavranos, “A study of higher education students’ self-perceived digital competences for learning and everyday life online participation,” J. Doc., vol. 76, no. 6, pp. 1413–1458, June 2020, doi: 10.1108/JD-03-2020-0041.

S. Saeed, S. A. Altamimi, N. A. Alkayyal, E. Alshehri, and D. A. Alabbad, “Digital Transformation and Cybersecurity Challenges for Businesses Resilience: Issues and Recommendations,” Sensors, vol. 23, no. 15, p. 6666, July 2023, doi: 10.3390/s23156666.

A. K. Gwenhure, “University students’ security behavior against email phishing attacks: insights from the health belief model,” J. Cybersecurity, vol. 11, no. 1, p. tyaf034, Jan. 2025, doi: 10.1093/cybsec/tyaf034.

K. Okokpujie, M. A. Ariyo, F. S. Moninuola, M. B. Akanle, and I. P. Okokpujie, “Evaluating Students’ Vulnerability and Awareness to Phishing Attacks in Educational Institutions,” Int. J. Saf. Secur. Eng., vol. 15, no. 3, pp. 621–630, Mar. 2025, doi: 10.18280/ijsse.150320.

I. Dunđer, S. Seljan, and M. Odak, “Information Security Awareness in the University Environment: A Focus on Undergraduates,” TEM J., pp. 1621–1628, May 2025, doi: 10.18421/TEM142-59.

M. A. Alqahtani, “Factors Affecting Cybersecurity Awareness among University Students,” Appl. Sci., vol. 12, no. 5, p. 2589, Mar. 2022, doi: 10.3390/app12052589.

K. Wang, X. Guo, and D. Yang, “Research on the Effectiveness of Cyber Security Awareness in ICS Risk Assessment Frameworks,” Electronics, vol. 11, no. 10, p. 1659, May 2022, doi: 10.3390/electronics11101659.

D. Fischer-Preßler, D. Bonaretti, and K. Fischbach, “A Protection-Motivation Perspective to Explain Intention to Use and Continue to Use Mobile Warning Systems,” Bus. Inf. Syst. Eng., vol. 64, no. 2, pp. 167–182, Apr. 2022, doi: 10.1007/s12599-021-00704-0.

N. S. Sulaiman, M. A. Fauzi, S. Hussain, and W. Wider, “Cybersecurity Behavior among Government Employees: The Role of Protection Motivation Theory and Responsibility in Mitigating Cyberattacks,” Information, vol. 13, no. 9, p. 413, Aug. 2022, doi: 10.3390/info13090413.

M. A. Alqahtani, “Factors Affecting Cybersecurity Awareness among University Students,” Appl. Sci., vol. 12, no. 5, p. 2589, Mar. 2022, doi: 10.3390/app12052589.

W. Li, R. Liu, L. Sun, Z. Guo, and J. Gao, “An Investigation of Employees’ Intention to Comply with Information Security System—A Mixed Approach Based on Regression Analysis and fsQCA,” Int. J. Environ. Res. Public. Health, vol. 19, no. 23, p. 16038, Nov. 2022, doi: 10.3390/ijerph192316038.

K. C. Ng, X. Zhang, J. Y. L. Thong, and K. Y. Tam, “Protecting Against Threats to Information Security: An Attitudinal Ambivalence Perspective,” J. Manag. Inf. Syst., vol. 38, no. 3, pp. 732–764, July 2021, doi: 10.1080/07421222.2021.1962601.

A. Alqarni, “The relationship between cybersecurity awareness and data protection behaviors among Saudi secondary school students: the mediating role of cyber threat perception and the moderating role of internet usage duration,” Humanit. Soc. Sci. Commun., vol. 12, no. 1, p. 1837, Nov. 2025, doi: 10.1057/s41599-025-06122-x.

E. R. Noble, T. F. Ask, and B. J. Knox, “Tailored Extended Reality Environments for Education and Training in Cybersecurity: Engagement Beyond Awareness,” in 2025 IEEE Global Engineering Education Conference (EDUCON), London, United Kingdom: IEEE, Apr. 2025, pp. 1–9. doi: 10.1109/EDUCON62633.2025.11016494.

J. C. Tise and M. M. McGill, “Validation of an Instrument to Measure Self-Efficacy in Information Security,” in Proceedings of the 2024 on ACM Virtual Global Computing Education Conference V. 1, Virtual Event NC USA: ACM, Dec. 2024, pp. 214–220. doi: 10.1145/3649165.3690095.

E. R. Noble, T. F. Ask, and B. J. Knox, “Tailored Extended Reality Environments for Education and Training in Cybersecurity: Engagement Beyond Awareness,” in 2025 IEEE Global Engineering Education Conference (EDUCON), London, United Kingdom: IEEE, Apr. 2025, pp. 1–9. doi: 10.1109/EDUCON62633.2025.11016494.

C. Z. Oroni, F. Xianping, D. D. Ndunguru, and A. Ani, “Enhancing cyber safety in e-learning environment through cybersecurity awareness and information security compliance: PLS-SEM and FsQCA analysis,” Comput. Secur., vol. 150, p. 104276, Mar. 2025, doi: 10.1016/j.cose.2024.104276.


Article Metrics

 Abstract Views : 94 times

Refbacks

  • There are currently no refbacks.


Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.