By Nick Kock, Head: CSO Business Advisory Services at Absa Group

At its core, cybersecurity strategy issues have one common weakest link: the human factor. However, we know little about human factor vulnerabilities that impact cybersecurity risk. Furthermore, cybersecurity research has historically focused on technical aspects, such as software vulnerabilities and network security. It resulted in a comparative lack of attention to the human factor and its role in cybersecurity risk.

Hence more investigation is required into the relationship between human factor vulnerabilities and cybersecurity risk so that we can develop a comprehensive understanding of the impact of human behaviour information security. By shedding light on the complex relationship between human factors and cyber risk, we will gain valuable insights in terms of how we can enhance our cybersecurity defences and protect sensitive information from malicious actors.

Cyberpsychology is a growing field of study that investigates the impact of emerging technology on humans, takes a transdisciplinary approach, and brings together various research silos in cybersecurity and behavioural sciences. The field of cyberpsychology is evolving rapidly due to several drivers.

Firstly, it is directly proportionate to the pace of technological change. New forms of digital media and communication emerge almost daily. As more and more people rely on these evolving technologies to communicate, work and socialise, there is a growing need to understand how this affects human behaviour, thoughts, emotions and society.

Secondly, the internet and social media, coupled with artificial intelligence, provide researchers with access to vast amounts of data on human behaviour, allowing cyberpsychologists to conduct studies on a previously unimaginable scale. As technology evolves, ongoing cyberpsychology studies are required to keep up with the changes to understand the psychological impacts of changes and adaptation of technology.

Thirdly, there is increasing awareness of the importance of mental health and well-being in the digital age. As concerns grow about the adverse effects of technology on mental health, cyberpsychologists are focusing more on understanding how to promote positive psychological outcomes in the digital world.

The rapidly growing fields of AI and VR have also raised important questions about their impact on the human psyche, prompting a need for further research to address several significant gaps. To better understand the long-term consequences of AI on human psychology, cyberpsychologist must explore areas such as socialisation, creativity and critical thinking over extended periods. Additionally, given that most existing research has been conducted in Western countries, it is crucial to investigate cross-cultural differences to ensure the generalisability of findings to other cultural contexts. Another essential aspect to examine is user perception and acceptance of AI.

Understanding how users perceive AI technologies and how these perceptions influence their behaviour and decision-making can offer valuable insights. Furthermore, the ethical and legal implications of AI on human psychology are not yet fully comprehended, warranting research into the potential ramifications of using AI in mental health diagnosis and treatment, as well as its impact on human rights.

However, addressing the complex ethical and social issues associated with AI and its effects on human psychology requires interdisciplinary approaches that integrate perspectives from psychology, computer science, law, ethics and philosophy. By collaboratively exploring these areas, cyberpsychologist develop a comprehensive understanding of AI's influence on human psychology and establish guidelines and practices that protect individuals while harnessing the potential of AI and VR technologies to improve lives.

At the same time, the prevalence and impact of digital addictions have become increasingly concerning, with billions of people using smartphones and social media worldwide. The World Economic Forum included "gaming disorder" as a diagnosable mental health condition in the 11th revision of the International Classification of Diseases (ICD-11) in 2019. Furthermore, a 2021 Journal of Behavioral Addictions meta-analysis estimated that the global prevalence of internet gaming disorder ranged from 0.7% to 27.5%, depending on the country, population and diagnostic criteria used.

Digital addictions, characterised by compulsive use and negative consequences in daily life, are associated with a range of mental health issues, including depression, anxiety and sleep disturbances that can damage interpersonal relationships, hinder academic and work performance, and reduce overall well-being. With Artificial intelligence (AI) technologies evolving rapidly, AI will likely fuel digital addictions by exploiting human psychology through personalised content, sophisticated recommender systems, gamification, variable rewards, social validation, well-timed push notifications and the fear of missing out (FOMO). These powerful strategies will and are already creating an irresistible digital environment, manipulating users' attention and emotions while fostering habit-forming behaviours. As technology continues to evolve and become more integrated into our daily lives, it is crucial that we address this growing issue and implement strategies that promote healthy technology use, ultimately safeguarding our mental and social health.

When it comes to cybersecurity, the old ways of protecting ourselves just are not enough anymore either. With technology constantly advancing, there are more and more ways for cybercriminals to meet their end goals. Right now, most cybersecurity experts react to threats as they arise, yet we see more advanced cyber-attacks that need a new approach. We need to focus not only on technical defences but also on organisational resilience and how people play a role in security. Even though we usually concentrate on the tech side of things, it is clear that human vulnerabilities are our weakest link, so understanding human factor vulnerabilities is becoming more critical.

As for cyberpsychology, the line between our online and offline lives is becoming opaque. A growing body of evidence shows that people act differently online than in the real world and do things online that they wouldn't usually do in the physical world. We used to look at individual users and their behaviour, but now we must consider how social, cultural and economic factors shape how people act online. This is especially true with cyberbullying, online harassment and radicalisation becoming more significant problems. However, our growing need for online anonymity and our immersion in social media and digital devices only compound the online risk and challenges we face.

At Absa we encourage the security experts, researchers and policymakers in my network to see cyberspace as a constantly changing environment in the same way our physical environment continually changes. To achieve this, we must better govern cyberspace to ensure our digital lives' security, privacy and integrity, and protect against cybercrimes and malicious activities. Establishing rules and regulations in cyberspace is critical. Without them, we cannot promote a more equitable and responsible use of digital resources, fostering trust and cooperation among users and nations.