Cybersecurity risk profiles of undergraduate students in platform dependent higher education

Abstract As higher education becomes increasingly organised through multi-platform digital learning ecosystems, students’ cybersecurity practices have become part of everyday academic participation. However, cybersecurity education often treats students as a uniform risk group and assumes that greater awareness leads to safer behaviour. This study challenges that assumption by identifying distinct cybersecurity risk profiles among undergraduate students. Survey data were collected from 372 undergraduate students at a public university in Ghana and analysed using latent profile analysis, chi-square tests and binary logistic regression. Four profiles emerged: low-exposure low-risk, digitally engaged protected, aware-but-vulnerable, and moderate baseline. The aware-but-vulnerable profile was the most theoretically important group, combining above-average social media use, high cybersecurity awareness and high cybersecurity vulnerability. Profile membership differed significantly by academic level and college, but not by gender or age. Second-year and third-year students were significantly more likely than first-year students to belong to the aware-but-vulnerable profile. The findings show that cybersecurity vulnerability in digital learning environments is not simply a lack of awareness, but a situated behavioural pattern shaped by academic progression, platform dependence, peer-mediated communication and routine digital practice. The study contributes to educational technology research by showing why cybersecurity education should move beyond general awareness campaigns towards targeted, practice-based support embedded in students’ everyday digital learning ecosystems.