{"id":"https://openalex.org/W7225635939","doi":"https://doi.org/10.1108/itp-04-2025-0584","title":"Understanding the enacted behaviors of university students susceptible to cybersecurity risks: a community of practice perspective","display_name":"Understanding the enacted behaviors of university students susceptible to cybersecurity risks: a community of practice perspective","publication_year":2026,"publication_date":"2026-11-09","ids":{"openalex":"https://openalex.org/W7225635939","doi":"https://doi.org/10.1108/itp-04-2025-0584"},"language":"en","primary_location":{"id":"doi:10.1108/itp-04-2025-0584","doi":"https://doi.org/10.1108/itp-04-2025-0584","is_oa":false,"landing_page_url":"https://doi.org/10.1108/itp-04-2025-0584","pdf_url":null,"source":{"id":"https://openalex.org/S185256354","display_name":"Information Technology and People","issn_l":"0959-3845","issn":["0959-3845","1758-5813"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a","anvur-class-a","anvur-scientific","cwts-core","fnege-2","jufo-2","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Technology & People","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006047564","display_name":"M. M. Kasim","orcid":"https://orcid.org/0000-0001-6154-6718","observed_orcids":["https://orcid.org/0000-0001-6154-6718"]},"institutions":[{"id":"https://openalex.org/I307268238","display_name":"Kaduna State University","ror":"https://ror.org/0063tkv49","country_code":"NG","type":"education","lineage":["https://openalex.org/I307268238"]},{"id":"https://openalex.org/I65734018","display_name":"American University of Nigeria","ror":"https://ror.org/02kv8bx48","country_code":"NG","type":"education","lineage":["https://openalex.org/I65734018"]}],"countries":["NG"],"is_corresponding":false,"raw_author_name":"Maharazu Kasim","raw_affiliation_strings":["American University of Nigeria Department of Information Systems, , ,","Kaduna State University Deparment of Library, , ,"],"raw_orcid":"https://orcid.org/0000-0001-6154-6718","affiliations":[{"raw_affiliation_string":"American University of Nigeria Department of Information Systems, , ,","institution_ids":["https://openalex.org/I65734018"]},{"raw_affiliation_string":"Kaduna State University Deparment of Library, , ,","institution_ids":["https://openalex.org/I307268238"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051251687","display_name":"Anup Shrestha","orcid":"https://orcid.org/0000-0002-2952-0072","observed_orcids":["https://orcid.org/0000-0002-2952-0072"]},"institutions":[{"id":"https://openalex.org/I185523456","display_name":"University of Southern Queensland","ror":"https://ror.org/04sjbnx57","country_code":"AU","type":"education","lineage":["https://openalex.org/I185523456"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Anup Shrestha","raw_affiliation_strings":["School of Business, Law, Humanities and Pathways, University of Southern Queensland , ,"],"raw_orcid":"https://orcid.org/0000-0002-2952-0072","affiliations":[{"raw_affiliation_string":"School of Business, Law, Humanities and Pathways, University of Southern Queensland , ,","institution_ids":["https://openalex.org/I185523456"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065790511","display_name":"Samuel C. Avemaria Utulu","orcid":"https://orcid.org/0000-0002-5451-7131","observed_orcids":["https://orcid.org/0000-0002-5451-7131"]},"institutions":[{"id":"https://openalex.org/I4405263093","display_name":"James Hope University","ror":"https://ror.org/02eynbb91","country_code":"NG","type":"education","lineage":["https://openalex.org/I4405263093"]}],"countries":["NG"],"is_corresponding":false,"raw_author_name":"Samuel C. Avemaria Utulu","raw_affiliation_strings":["Fintech and Analytics Program, Business School, James Hope University , ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fintech and Analytics Program, Business School, James Hope University , ,","institution_ids":["https://openalex.org/I4405263093"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"39","issue":"8","first_page":"220","last_page":"256"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cybersecurity-vulnerabilities","display_name":"cybersecurity vulnerabilities","score":0.640999972820282},{"id":"https://openalex.org/keywords/human-factors-in-cybersecurity","display_name":"human factors in cybersecurity","score":0.6869999766349792},{"id":"https://openalex.org/keywords/penetration-testing","display_name":"penetration testing","score":0.6600000262260437},{"id":"https://openalex.org/keywords/communities-of-practice","display_name":"communities of practice","score":0.9010000228881836},{"id":"https://openalex.org/keywords/college-students","display_name":"university students","score":0.75},{"id":"https://openalex.org/keywords/social-structure","display_name":"social structure","score":0.7390000224113464},{"id":"https://openalex.org/keywords/organizational-actors","display_name":"organizational actors","score":0.4819999933242798},{"id":"https://openalex.org/keywords/human-vulnerability","display_name":"human vulnerability","score":0.6240000128746033}],"concepts":[{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.8136000037193298},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.5565999746322632},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5218999981880188},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.5134000182151794},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.46959999203681946},{"id":"https://openalex.org/C203663800","wikidata":"https://www.wikidata.org/wiki/Q848979","display_name":"Citizen journalism","level":2,"score":0.4174000024795532},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.3921000063419342},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3732999861240387},{"id":"https://openalex.org/C70118762","wikidata":"https://www.wikidata.org/wiki/Q376934","display_name":"Social engineering (security)","level":2,"score":0.367000013589859},{"id":"https://openalex.org/C55587333","wikidata":"https://www.wikidata.org/wiki/Q1133029","display_name":"Engineering ethics","level":1,"score":0.36399999260902405},{"id":"https://openalex.org/C2779208394","wikidata":"https://www.wikidata.org/wiki/Q7140460","display_name":"Participatory sensing","level":2,"score":0.3612000048160553},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.35260000824928284},{"id":"https://openalex.org/C2779390178","wikidata":"https://www.wikidata.org/wiki/Q29137","display_name":"Cybercrime","level":3,"score":0.3222000002861023},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.3034999966621399},{"id":"https://openalex.org/C505623098","wikidata":"https://www.wikidata.org/wiki/Q3002932","display_name":"Critical security studies","level":5,"score":0.3034999966621399},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C203133693","wikidata":"https://www.wikidata.org/wiki/Q7283","display_name":"Terrorism","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.29429998993873596},{"id":"https://openalex.org/C15046100","wikidata":"https://www.wikidata.org/wiki/Q2337214","display_name":"Social learning theory","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C2780709859","wikidata":"https://www.wikidata.org/wiki/Q7550754","display_name":"Social practice","level":3,"score":0.27709999680519104},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.27320000529289246},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.2727999985218048},{"id":"https://openalex.org/C127627568","wikidata":"https://www.wikidata.org/wiki/Q1639361","display_name":"Sociotechnical system","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.259799987077713}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1108/itp-04-2025-0584","doi":"https://doi.org/10.1108/itp-04-2025-0584","is_oa":false,"landing_page_url":"https://doi.org/10.1108/itp-04-2025-0584","pdf_url":null,"source":{"id":"https://openalex.org/S185256354","display_name":"Information Technology and People","issn_l":"0959-3845","issn":["0959-3845","1758-5813"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["abdc-a","anvur-class-a","anvur-scientific","cwts-core","fnege-2","jufo-2","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319811","host_organization_name":"Emerald Publishing Limited","host_organization_lineage":["https://openalex.org/P4310319811"],"host_organization_lineage_names":["Emerald Publishing Limited"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Technology & People","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":66,"referenced_works":["https://openalex.org/W1580514575","https://openalex.org/W1979290264","https://openalex.org/W1982345010","https://openalex.org/W2012467271","https://openalex.org/W2014853386","https://openalex.org/W2016943542","https://openalex.org/W2050401924","https://openalex.org/W2073642329","https://openalex.org/W2099222119","https://openalex.org/W2107483696","https://openalex.org/W2108644644","https://openalex.org/W2126070475","https://openalex.org/W2147502725","https://openalex.org/W2148277253","https://openalex.org/W2149520412","https://openalex.org/W2221203134","https://openalex.org/W2238567904","https://openalex.org/W2426688026","https://openalex.org/W2501814179","https://openalex.org/W2593649556","https://openalex.org/W2611817064","https://openalex.org/W2729876077","https://openalex.org/W2752067247","https://openalex.org/W2766373534","https://openalex.org/W2808680185","https://openalex.org/W2883464778","https://openalex.org/W2918776936","https://openalex.org/W2933127114","https://openalex.org/W2952002252","https://openalex.org/W2963187247","https://openalex.org/W3005384491","https://openalex.org/W3019371523","https://openalex.org/W3107568738","https://openalex.org/W3111033173","https://openalex.org/W3119410330","https://openalex.org/W3119847909","https://openalex.org/W3131631990","https://openalex.org/W3133843004","https://openalex.org/W3136325801","https://openalex.org/W3137273165","https://openalex.org/W3159994884","https://openalex.org/W3173896468","https://openalex.org/W3175154847","https://openalex.org/W3178433154","https://openalex.org/W3185664384","https://openalex.org/W3204452949","https://openalex.org/W3212663500","https://openalex.org/W4206668828","https://openalex.org/W4226451439","https://openalex.org/W4232974126","https://openalex.org/W4232991710","https://openalex.org/W4282920965","https://openalex.org/W4286374968","https://openalex.org/W4286587339","https://openalex.org/W4307056296","https://openalex.org/W4312039695","https://openalex.org/W4313396835","https://openalex.org/W4323568633","https://openalex.org/W4367319953","https://openalex.org/W4379115403","https://openalex.org/W4382366041","https://openalex.org/W4392124235","https://openalex.org/W4392506552","https://openalex.org/W4399155135","https://openalex.org/W4402630076","https://openalex.org/W4404837961"],"related_works":["https://openalex.org/W7042754666","https://openalex.org/W3016559124","https://openalex.org/W2270658095","https://openalex.org/W7163749290","https://openalex.org/W7224676809","https://openalex.org/W2968088032","https://openalex.org/W2943352284","https://openalex.org/W4396876495","https://openalex.org/W7132990045","https://openalex.org/W813401969"],"abstract_inverted_index":{"Purpose":[0],"Organizations":[1,178],"carry":[2],"out":[3],"an":[4,76],"ethical":[5,155,159],"hacking":[6,46,156,160],"approach":[7],"to":[8,35,48,142,162,172,184,224,275,283,289],"combat":[9],"cybersecurity":[10,18,29,51,128,143,225,291],"challenges,":[11],"focusing":[12],"on":[13,182],"the":[14,67,83,90,98,115,122,192,201,208,235,266,284],"technical":[15,154,164],"aspects":[16],"of":[17,70,85,118,124,210,244,279,286],"vulnerabilities.":[19,129],"This":[20,55,261],"practice":[21,86],"persists":[22],"despite":[23],"evidence":[24,243],"that":[25,27,126,138,168,189],"shows":[26,57],"human-enacted":[28],"vulnerabilities":[30,52,167,188],"constitute":[31,127],"a":[32,44,290],"significant":[33],"threat":[34],"organizational":[36,71,280],"cybersecurity.":[37],"To":[38],"address":[39],"this":[40,148,204],"challenge,":[41],"we":[42],"propose":[43],"socio-ethical":[45],"framework":[47,56],"deal":[49],"with":[50],"in":[53,63,198,238,265],"organizations.":[54],"how":[58,114,183,214,247,276],"these":[59,248],"behaviors":[60,125,135,222,249,287],"are":[61,230,250],"embedded":[62],"and":[64,93,107,136,157,165,213,252],"reinforced":[65],"through":[66,105],"everyday":[68],"practices":[69,161],"actors.":[72],"Design/methodology/approach":[73],"We":[74],"adopted":[75],"interpretive":[77],"case":[78],"study":[79,99,112,205,262],"research":[80,269],"method":[81],"using":[82],"community":[84],"(CoP)":[87],"theory":[88],"as":[89,97,254,272],"theoretical":[91],"lens":[92],"university":[94],"undergraduate":[95,119],"students":[96,120],"context.":[100],"Research":[101],"data":[102],"were":[103],"collected":[104],"interviews":[106],"participatory":[108],"observation.":[109],"Findings":[110],"The":[111],"identified":[113],"social":[116,134,158,211,259,277],"structure":[117,278],"shapes":[121],"enactment":[123,285],"Organizational":[130],"actors":[131,281],"jointly":[132],"create":[133],"actions":[137,256],"make":[139],"organizations":[140,150],"vulnerable":[141,223],"challenges.":[144],"Practical":[145],"implications":[146,177],"Using":[147,200],"study,":[149],"can":[151,190,216],"combine":[152],"both":[153],"detect":[163,185],"behavioral":[166],"expose":[169],"their":[170,258],"organization":[171],"cyber":[173,194],"security":[174,195],"threats.":[175,226],"Social":[176],"develop":[179],"new":[180],"insights":[181],"taken-for-granted":[186,255],"enacted":[187,251],"surpass":[191],"best":[193],"protocols":[196],"put":[197],"place.":[199],"CoP":[202],"theory,":[203],"has":[206],"established":[207],"relevance":[209],"factors":[212],"they":[215,273],"enhance":[217],"understanding":[218],"human":[219,236,267],"vulnerability,":[220],"particularly":[221,271],"Originality/value":[227],"While":[228],"there":[229,240],"numerous":[231],"studies":[232,245,264],"looking":[233],"at":[234],"factor":[237],"cybersecurity,":[239],"is":[241],"little":[242],"showing":[246],"experienced":[253],"within":[257],"contexts.":[260],"enhanced":[263],"vulnerability":[268],"stream":[270],"relate":[274],"lead":[282],"susceptible":[288],"threat.":[292]},"counts_by_year":[],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2026-11-10T00:00:00"}