Cyber Resilient Employee – Determinants and Definition

The threat of cyberattacks is evolving at an accelerated pace, with human beings identified as the most vulnerable element within cybersecurity. Sectors poised for future growth, such as healthcare and insurance, may encompass critical infrastructure operations and are therefore particularly susceptible to these threats. In recent years, the notion of resilience has gained prominence across various academic fields and has been adapted to the context of cybersecurity, resulting in the emergence concept of cyber resilience. This paper investigates cyber resilience in relation to individual employees. Therefore, the term ‘Cyber Resilient Employee’ is derived from theory and put into context. Subsequently, a literature analysis is carried out resulting in a conceptual research model. Consequently, an empirical study with thirteen employees from the healthcare insurance industry is performed and evaluated. This results in a final research model delineating four determinants of a Cyber Resilient Employee: ‘Expertise and Experience’, ‘Pragmatism’, ‘Eagerness to learn’ and ‘Discipline’. The research is constrained by the validation of practical applicability, the abstinence of a quantitative part and limitations associated with no assertion of comprehensiveness in the literature review.