Cybersecurity practices among Malaysian government employees: the role of protection motivation theory and responsibility norms

Purpose Due to the advancement of digital technology, cybersecurity has become a major worry in society. Employees' varied views towards cybersecurity policies are a common issue. This study aims to analyze the determinants of cybersecurity behaviour using threat appraisal and coping appraisal, which is supported by the protection motivation theory (PMT) and integrates the responsibility norm within the scope context of government employees. Design/methodology/approach This study expands the role of PMT by including personal and third-party responsibility. A total of 446 government employees participated in the study, which was conducted using partial least square-structural equation modelling (PLS-SEM). Findings The findings suggest that cybersecurity behaviour should be cultivated, and the importance of cybersecurity behaviour in handling cybersecurity risks among Malaysian government employees should be better understood. Research limitations/implications Implications for securing government agency cybersecurity practice encompass theoretical and practical aspects pertinent to government organizations and have considerable implications for the education sector. Originality/value The study establishes a basis for subsequent research and policy formulation focused on improving cybersecurity measures and resilience in educational institutions, safeguarding sensitive information and promoting a secure digital learning environment.