Strengthening cybersecurity in a government department by addressing password management challenges and human factor vulnerabilities

Abstract This study investigates password management challenges and human factor vulnerabilities within a South African district health department using a quantitative approach with 50 respondents. Descriptive and inferential statistics were employed, guided by the Human Factor Diamond (HFD) model as an analytical lens. Results highlight poor password hygiene, with 60% of users reusing passwords and 20% never updating them. Significant associations were found between operational delays and unclear role assignment (p <.001), while a positive correlation (ρ =.416, p =.003) linked perceived system security with data protection confidence. Inconsistent training and decentralised policy enforcement exacerbate cybersecurity risks. While nearly half of the respondents rated current reset mechanisms as effective, many expressed the need for clearer guidance, stronger safeguards, and improved support. Human factors, including digital literacy, preparedness, and role clarity, emerged as central barriers to effective password management. The study recommends centralised oversight, enhanced training, and secure, user-friendly technologies such as multi-factor authentication and AI-supported reset systems.