Abstract

The misconception of cyber security problems is that they can be solved solely through technological means and ignores the significant impact of the human factors which is often seen as the weakest link. This is a fundamental problem that creates threats and vulnerabilities in the implementation of cyber security. This study focuses on cultivating a cyber security culture to effectively manage and direct human factors as part of an organization to address these problems. Through a systematic literature review, we explored research trends and identified success factors in building a cyber security culture. The process of synthesizing success factors is based on the concept of organizational culture, considering three layers: artefacts, espoused values, and basic assumptions. A total of 31 success factors were identified and categorized into five dimensions: Strategy, Technology, Organization, People, and Environment. This approach provides organizations with comprehensive insights into areas requiring improvement, facilitating a clearer path to strengthening cyber security culture and improving preparedness for cyber threats. Additionally, maintaining a balanced approach to success factors ensures a holistic perspective in addressing cyber security challenges, preventing the trap of relying solely on technological solutions.