Paper 2026/490

Towards Modeling Cybersecurity Behavior of Humans in Organizations

Klaas Ole Kürtz, Kiel University of Applied Sciences
Abstract

We undertake a comprehensive and structured synthesis of the drivers of human behavior in cybersecurity, focusing specifically on people within organizations (i.e., especially employees in companies), and integrate key concepts such as awareness, security culture, and usability into a coherent theoretical framework. This model is then compared with several relevant behavioral models that fundamentally represent drivers of human behavior. Additionally, we discuss how this theoretical framework can help the domain of agentic AI security: We argue that as AI systems increasingly act as autonomous agents within organizations and based on natural language processing, they also exhibit vulnerabilities analogous to human behavioral risks. Consequently, we propose that this human-centric model offers a blueprint for developing additional security strategies against manipulation attacks targeting AI agents.

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Preprint.
Keywords
Human BehaviorAwarenessAgentic AIAI Security
Contact author(s)
klaas ole kuertz @ haw-kiel de
History
2026-03-11: approved
2026-03-09: received
See all versions
Short URL
https://ia.cr/2026/490
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2026/490,
      author = {Klaas Ole Kürtz},
      title = {Towards Modeling Cybersecurity Behavior of Humans in Organizations},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/490},
      year = {2026},
      url = {https://eprint.iacr.org/2026/490}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.