Methodological rigour in cybersecurity culture research: a systematic review

Purpose Cyberthreats are a global phenomenon, exposing societies to economic, social and political risks. The most effective strategy for combating cybercrimes is to adopt a robust cybersecurity governance framework. However, epistemological challenges associated with cyber governance impose significant methodological limitations on cybersecurity research. Thus, this study aims to assess the extent of methodological rigour in cybersecurity culture research through the lens of reporting transparency. Design/methodology/approach To address the identified problem, the authors conducted a systematic literature review following the Preferred Reporting Items for Systematic and Meta-analysis framework, analysing publications from 2015 to 2024 retrieved from two leading databases (Web of Science and Google Scholar). This scientific approach ensures the inclusion of high-quality studies and facilitates a comprehensive assessment of validity and reliability in cybersecurity culture research. Findings The findings show that none of the reviewed studies fulfilled all the criteria. Furthermore, the findings indicate that the area most in need of methodological reporting transparency is the data analysis and reporting dimension. Originality/value This study applies a structured framework to assess methodological rigour in cybersecurity research by evaluating reporting transparency across research design, data collection procedures and data analysis and reporting. It further proposes guidelines to improve the quality and reliability of future studies.