The Knowledge–Behavior Gap in Digital Security: Evidence from IT Students

11th International Scientific Conference Technics, Informatics and Education – TIE 2026, (pp. 297-304)

АУТОР(И) / AUTHOR(S): Nebojša Stanković  and Pavle Bogutović 

Download Full Pdf   

DOI: https://doi.org/10.46793/TIE26.297S

САЖЕТАК /ABSTRACT:

This paper examines the relationship between digital security knowledge and reported behavior among Information Technology students, with a focus on the knowledge–behavior gap in cybersecurity practices. Although students are expected to possess adequate digital competencies, prior studies suggest that awareness of digital risks does not always translate into secure behavior. The study was conducted on a sample of 143 Information Technology students at the Faculty of Technical Sciences in Čačak. Data were collected using a structured questionnaire covering threat recognition, security practices, privacy protection, and copyright awareness. Descriptive statistical analysis was used to compare knowledge-related and behavior-related indicators. The results show a high level of awareness of digital threats (M = 4.2), while reported security behavior is notably lower (M = 3.1), indicating a persistent knowledge–behavior gap. The largest discrepancies are observed in password management, use of secure networks, and privacy-related practices. These findings confirm that digital security competence depends not only on knowledge, but also on behavioral patterns and contextual factors. The findings highlight the importance of integrating practical and scenario-based learning approaches into digital security education in order to facilitate the translation of knowledge into secure behavior.

КЉУЧНЕ РЕЧИ / KEYWORDS: 

digital security, digital literacy, student behavior, online risks, education

ПРОЈЕКАТ / ACKNOWLEDGEMENT:

This study was supported by the Ministry of Science, Technological Development and Innovation of the Republic of Serbia, and these results are parts of the Grant No. 451-03-136/2025-03/200132, with University of Kragujevac – Faculty of Technical Sciences Čačak.

ЛИТЕРАТУРА / REFERENCES:

  • Regulatory Authority for Electronic Communications and Postal Services (RATEL) (2025). Annual Report 2024. https://www.scribd.com/document/999090932/2024-Izvestaj-o-radu
  • Danao, A.B., Enriquez, M.E.S., Montejo, K.B.B., Patricio, A.A., Sonido, M.W.G., & Ador, Z. (2025). Digital Natives: A Case Study Exploring the Digital Literacy Gaps in A Rural High School. Journal of Social, Humanity, and Education (JSHE), 5(2), 143-158. https://doi.org/10.35912/jshe.v5i2.2247
  • European Commission (2023). Digital education action plan 2021-2027: Improving the provision of digital skills in education and training. Publications Office of the European Union. https://data.europa.eu/doi/10.2766/149764
  • van Deursen, A.J.A.M., & Mossberger, K. (2018). Any Thing for Anyone? A New Digital Divide in Internet-of-Things Skills. Policy & Internet, 10(2), 122-140. https://doi.org/10.1002/poi3.171
  • Eshet, Y. (2012). A Revised Model for Digital Literacy: Thinking in the Digital Era. Issues in informing science & information technology, 9(31), 267-276. https://doi.org/10.28945/1621 (
  • OECD (2025), How’s Life for Children in the Digital Age? OECD Publishing, Paris. https://doi.org/10.1787/0854b900-en.
  • Hobbs, J. (2023). Cybersecurity awareness in higher education: a comparative analysis of faculty and staff. Issues in Information Systems, 24(1), 159-169. https://doi.org/10.48009/1_iis_2023_114
  • Hadlington, L., & Ryding, C. (2025). Human Factors and Cybersecurity: The Psychology of Online Safety and Security. Routledge. https://doi.org/10.4324/9781003509011
  • Parsons, K., Calic, D., Pattinson, M., Butavicius, M., McCormac, A., & Zwaans, T. (2017). The Human Aspects of Information Security Questionnaire (HAIS-Q). Computers & Security, 66, 40-51. https://doi.org/10.1016/j.cose.2017.01.004
  • Al Zaidy, A. (2025). Measuring Cybersecurity Awareness of Students: a Study of State College Students. Journal of Information Technology, Cybersecurity, and Artificial Intelligence, 2(3), 17-40. https://doi.org/10.70715/jitcai.2025.v2.i3.030
  • Santelices, R. (2025). A Students’ Perspective on Cybersecurity Awareness and Education. International Journal of Research and Innovation in Social Science, IX(IIIS), 7976-7988. https://dx.doi.org/10.47772/IJRISS.2025.903SEDU0597
  • Bromall, N., Draus, P., Mishra, S., Slonka, K., & Trunkos, J. (2025). Cybersecurity awareness among post-secondary students. Issues in Information Systems, 26(3), 149-157. https://doi.org/10.48009/3_iis_2025_2025_112
  • Hadlington, L. (2018). The “Human Factor” in Cybersecurity: Exploring the Accidental Insider. In J. McAlaney, L. Frumkin, & V. Benson (Eds.), Psychological and Behavioral Examinations in Cyber Security (pp. 46-63). IGI Global Scientific Publishing. https://doi.org/10.4018/978-1-5225-4053-3.ch003
Post Views: 9