Organizations moving operations onto cloud platforms and data-driven tools often treat security as a technical problem. A new editorial in the journal Frontiers in Computer Science argues that this view is incomplete, and that protection depends just as heavily on how people use controls and how well institutions are prepared to support them.
The editorial, written by Saqib Saeed of Imam Abdulrahman Bin Faisal University, Noor Zaman Jhanjhi of Taylor's University, Muhammad Adnan Khan of Gachon University and Dileep Kumar Yadav of Bennett University, brings together four studies spanning healthcare, education, public finance and everyday internet use, according to a report by Bioengineer.org.
Why Technology Alone Falls Short
The editors describe privacy and cybersecurity as two linked concerns. Security protects systems and information from threats, while privacy determines what data is collected, how it is used and who sees it.
Their central point is that controls only work when users understand them, can realistically carry them out and are backed by their organizations. Awareness campaigns, they argue, achieve little if responsibilities are unclear, departments do not coordinate or risk management lacks resources.
When digital tools are deployed without considering human participation and operational weak spots, the editors warn, organizations open themselves to disruptions and exposure of sensitive data.
The Security Measures Users Find Most Frustrating
One study, led by Kour and colleagues, combined a systematic review of research published between 2015 and 2025 with a questionnaire. Participants named frequent password changes and multi-factor authentication as the most irritating requirements.
By contrast, single sign-on, biometric login and automatic updates were the most welcome. The authors use these findings to propose a conceptual model drawing on Industry 5.0 ideas, aiming to balance protection, convenience and sustainability without burying users in authentication steps.
Brazil's Public Sector Leans Too Heavily on Incident Response
A study by Cardoso assessed the technological maturity of Brazilian government services in health, education and finance. It found that traditional public administration concentrates on reacting to incidents and enforcing controls.
Cardoso argues that a sturdier foundation comes from continuous risk assessment, capacity building, workforce training and public-private partnerships, with public technology companies playing a role in threat detection and resilience. The study also stresses that interconnected public systems need coordinated national oversight rather than agency-by-agency management, and it examines institutional gaps and the digital divide.
Different Users in India Face Different Risks
Kaur and Chahal ran five focus groups in India that included secondary school students, university students, senior citizens and social activists. Using thematic analysis, they identified online transaction risks, social media dangers, limited technical literacy and anxiety about technology as the main obstacles.
Participants also showed little awareness of how routine online activity can erode personal privacy. The researchers conclude that awareness programs should be tailored to the literacy levels of specific groups rather than delivered as one-size-fits-all campaigns.
What Shapes Healthcare Workers' Security Habits
In Saudi Arabia, Alharbi and Alkhalifah surveyed a convenience sample of 252 healthcare employees, applying deterrence and protection motivation theories and analyzing results with structural equation modeling and artificial neural networks.
Trust, system exploitability, awareness and the certainty of punishment significantly influenced how employees behaved. Privacy concerns and technological complexity affected how staff judged threats.
Notably, perceived threat, perceived vulnerability and self-efficacy showed no measurable effect on security behavior in this setting, a result that challenges assumptions behind many fear-based training approaches.
Lessons for Leaders Driving Digital Transformation
The editors acknowledge the collection is not a complete answer, but say it offers an evidence base for making security practices fit real workflows and user needs. They urge practitioners to adapt safeguards to particular user groups and environments while protecting both privacy and service continuity.
For researchers, they call for longitudinal and cross-sector studies to test whether usable controls, targeted training and coordinated governance deliver lasting behavior change. For companies and startups building or adopting digital platforms, the takeaway is practical: friction, unclear ownership and generic training can quietly undermine even well-designed security technology.
Source: Bioengineer.org
