Commentary

Most IT leaders will agree that user behavior is a significant cybersecurity factor, yet one that is a challenge to control. Many of the most successful cyberattacks exploit human error. The above research linking personality to cybercrime prevention strategies may prove to be valuable.

The above report identified personality characteristics which may indicate a propensity towards certain online missteps. This knowledge could help determine what forms of security training have the best results. For example, individuals identified as the Extraverted type, those who work through problems by talking them out, tend to be more easily manipulated and susceptible to phishing attacks. They are, however, more adept at recognizing attacks from the outside.

Other personality types identified in the research include Sensing types – those who have strong observational and memory retention skills. Perceiving types tend to be more flexible and casual, while Feeling types are those directed by personal values. Judging types are those who are methodical or structured, and Thinking types are those who use logic to solve problems. These personality types, or a combination of them, seem to play a role in how individuals approach cybersecurity.

Although the research is new, it has long been understood that personality typing can have value in many areas of business, so it is not surprising that experts are exploring its application in the area of cybersecurity.

For now, organizations must focus on training and education. An important part of education is showing employees how others have made mistakes in order to avoid replicating them in your area.