Loading...
Publication
Cibersegurança e comportamento organizacional: A formação como vetor de adoção de autenticação multifator no setor público
| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| 822.83 KB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
Esta dissertação analisa o impacto da formação em cibersegurança na intenção de adoção da autenticação multifator (MFA) por parte de colaboradores do setor público português. Com base no modelo UTAUT (Unified Theory of Acceptance and Use of
Technology), o estudo avalia de que forma perceções individuais — como utilidade esperada, esforço percebido, influência social, condições facilitadoras, autoeficácia e ansiedade — influenciam a intenção comportamental de adoção da MFA. É também analisado se essas perceções podem ser positivamente influenciadas por uma intervenção formativa breve e dirigida.
Foi utilizado um desenho experimental com grupo de controlo e grupo experimental, sendo este último exposto a um vídeo educativo de sensibilização para a cibersegurança com cinco minutos de duração. Ambos os grupos responderam a um questionário baseado no modelo UTAUT. Foram recolhidas 165 respostas válidas e conduzidas análises estatísticas descritivas, correlações de Pearson e testes t. Os resultados confirmam que os principais construtos do modelo estão significativamente correlacionados com a intenção de adoção da MFA, com destaque para a utilidade esperada, o esforço percebido, a autoeficácia e as
condições facilitadoras. A ansiedade apresentou uma correlação negativa moderada, enquanto a formação prévia em cibersegurança, fora do contexto experimental, não revelou associação significativa com os construtos analisados.
A intervenção formativa demonstrou ter impacto positivo na perceção de facilidade de utilização, confiança e, em alguns casos, utilidade e influência social, especialmente nos métodos de MFA mais familiares aos participantes. Os resultados sugerem que mesmo formatos de formação breves e escaláveis podem contribuir para uma melhoria comportamental em matéria de cibersegurança. Conclui-se que a implementação eficaz da MFA em organizações públicas exige uma combinação de medidas técnicas, formação prática e compromisso organizacional com a cultura de segurança.
This dissertation investigates the impact of cybersecurity training on the intention to adopt multifactor authentication (MFA) among employees in the Portuguese public sector. Based on the Unified Theory of Acceptance and Use of Technology (UTAUT), the study analyses how individual perceptions—such as performance expectancy, effort expectancy, social influence, facilitating conditions, self-efficacy, and anxiety—affect users’ behavioural intention to adopt MFA. It further explores whether these perceptions can be influenced by a short, targeted educational intervention. An experimental design was employed, involving a control group and an experimental group, the latter exposed to a five-minute cybersecurity awareness video prior to completing a UTAUT-based questionnaire. A total of 165 valid responses were collected and analysed using descriptive statistics, Pearson correlations, and t-tests. The results confirm that the main UTAUT constructs are significantly correlated with the intention to adopt MFA, with performance expectancy, effort expectancy, self-efficacy and facilitating conditions showing the strongest associations. Anxiety showed a moderate negative correlation, and prior cybersecurity training—outside the experimental context—was not significantly related to any of the key constructs. The educational intervention demonstrated a measurable positive effect on perceptions of ease of use, confidence, and— in some cases—perceived utility and social influence, particularly for authentication methods with which participants were already familiar. These findings suggest that even short and scalable training formats can positively influence cybersecurity behaviour in institutional contexts. The study concludes that successful implementation of MFA in public organisations requires a combination of technical measures, practical training, and organisational commitment to security culture.
This dissertation investigates the impact of cybersecurity training on the intention to adopt multifactor authentication (MFA) among employees in the Portuguese public sector. Based on the Unified Theory of Acceptance and Use of Technology (UTAUT), the study analyses how individual perceptions—such as performance expectancy, effort expectancy, social influence, facilitating conditions, self-efficacy, and anxiety—affect users’ behavioural intention to adopt MFA. It further explores whether these perceptions can be influenced by a short, targeted educational intervention. An experimental design was employed, involving a control group and an experimental group, the latter exposed to a five-minute cybersecurity awareness video prior to completing a UTAUT-based questionnaire. A total of 165 valid responses were collected and analysed using descriptive statistics, Pearson correlations, and t-tests. The results confirm that the main UTAUT constructs are significantly correlated with the intention to adopt MFA, with performance expectancy, effort expectancy, self-efficacy and facilitating conditions showing the strongest associations. Anxiety showed a moderate negative correlation, and prior cybersecurity training—outside the experimental context—was not significantly related to any of the key constructs. The educational intervention demonstrated a measurable positive effect on perceptions of ease of use, confidence, and— in some cases—perceived utility and social influence, particularly for authentication methods with which participants were already familiar. These findings suggest that even short and scalable training formats can positively influence cybersecurity behaviour in institutional contexts. The study concludes that successful implementation of MFA in public organisations requires a combination of technical measures, practical training, and organisational commitment to security culture.
Description
Keywords
autenticação multifator cibersegurança adoção tecnológica UTAUT setor público formação intenção comportamental