Human factors in cybersecurity refer to the ways people’s behaviours, decisions and mistakes influence the security of systems and data. While technology provides defences, humans often become the weakest link due to habits, lack of awareness, or psychological manipulation. Key aspects include: Social Engineering Vulnerability: Attackers exploit trust and emotions through phishing, pretexting, or baiting. Poor Password Practices: Using weak or reused passwords makes accounts easy targets. Insider Threats: Employees may unintentionally leak data or, in rare cases, act maliciously. Lack of Awareness: Many breaches occur because users don’t recognise suspicious emails or unsafe links. Cognitive Biases: Overconfidence, urgency and convenience often lead to risky decisions. Ultimately, human factors highlight that cybersecurity is not just a technical challenge, it’s a behavioural one. Training, awareness programs, and a strong security culture are essential to reduce these risks.

Educational institutions must prioritise physical security because they house valuable assets, students, staff, research materials and technology infrastructure. Unauthorised physical access to classrooms, labs, or server rooms can lead to theft of devices, exposure of sensitive data, and disruption of learning. Strong measures such as controlled entry points, surveillance systems, secure storage for IT equipment and visitor management protocols help prevent breaches. Physical security complements cybersecurity by ensuring that critical hardware and confidential information remain protected from tampering or theft.