A comprehensive picture of cybersecurity and information security awareness : A literature review of research between 2019 - 2024

This study examines the current research landscape in cybersecurity and Information Security Awareness through a systematic literature review of publications from 2019 to 2024.The aim is to analyze the key risks and measures highlighted in the literature, as well as to suggest directions for future research.The study highlights two main concepts: human aspects, which encompass knowledge, attitudes, and behaviors; and organizational aspects, which include leadership, security culture, and security policies.In addition to these two concepts, risk factors and measures related to cybersecurity and information security awareness are addressed.The findings indicate that a lack of awareness and compliance with security policies are crucial weaknesses that contribute to increased cybersecurity risks.The study emphasizes the importance of educational initiatives and the development of a strong security culture to effectively change behaviors and attitudes.Furthermore, the significance of engaged and proactive leadership is underscored to promote compliance and strengthen the overall security culture.Finally, the study highlights the importance of a symbiosis between human and organizational aspects, emphasizing the need for an integrated strategy that combines technical, human, and organizational efforts to effectively manage and reduce cybersecurity risks and enhance resilience against cyber threats.