PSYC FPX 4210 Assessment 5 Groups and Communities

Name

Capella University

PSYC FPX 4210 Cyberpsychology

Prof. Name

Date

PSYC FPX 4210 Assessment 5 Groups and Communities

Cybersecurity awareness among high school students is important because everyday behaviors can increase or reduce digital security risks. Actions such as using weak passwords, leaving devices logged in, clicking suspicious links, or failing to recognize phishing attempts can expose students and schools to cyber threats. Research suggests that practical cybersecurity education, interactive activities, serious games, and repeated habit-building exercises can help young people develop safer digital behaviors. A qualitative online survey can provide useful insight into students’ awareness of cybercrime, their cybersecurity habits, the reasons behind those behaviors, and their willingness to participate in school-based cybersecurity drills.

Research Questions

This study examines cybersecurity awareness and behavior among high school students. It focuses on what students know about cybercrime, how they manage digital security risks, and what motivates them to adopt safer practices.

The primary research questions are:

• Are high school students aware of common forms of cybercrime?

• What risks do students associate with leaving digital devices logged in when they are not being used?

• What motivates students to shut down, lock, or log out of devices after use?

• Would students be interested in participating in cybersecurity drills at school?

• Is cybersecurity behavior associated with other everyday safety behaviors, such as locking a car after parking in a public location?

The final question functions as a control question. Comparing cybersecurity behavior with a familiar physical safety behavior may help researchers determine whether students apply similar precautionary habits across different situations.

Methods, Procedures, and Techniques

Research Method

A qualitative online survey can be used to investigate cybersecurity awareness and behaviors among high school students. The survey can combine closed-ended questions with open-ended questions to capture both measurable responses and students’ explanations of their attitudes and experiences.

Questions can address topics such as awareness of cybercrime, device security, password practices, phishing, account protection, and students’ attitudes toward cybersecurity drills. Open-ended questions can allow participants to explain why they do or do not follow particular cybersecurity practices.

Because the study involves high school students, researchers should obtain the necessary ethical approvals and school permissions before collecting data. Research involving minors should also follow applicable requirements for parental or guardian consent and student assent, along with institutional privacy and confidentiality procedures.

Data Collection and Analysis

Data can be collected through an electronic survey distributed to eligible students. Closed-ended responses can be summarized using descriptive statistics to identify patterns in cybersecurity knowledge, attitudes, and behaviors.

Open-ended responses can be analyzed through inductive thematic analysis. This qualitative approach allows researchers to identify recurring ideas and patterns directly from participant responses rather than requiring responses to fit predetermined categories.

For example, students may describe convenience, forgetfulness, privacy concerns, fear of losing information, previous experiences with cyber threats, or school policies as reasons for their cybersecurity behaviors. Grouping these recurring ideas into themes can provide a clearer understanding of what influences students’ decisions.

Why Use an Online Survey for Cybersecurity Research?

An online survey is well suited to research involving high school students because it can be distributed efficiently to a large group and completed using school-provided digital devices. A standardized electronic format also allows researchers to collect responses consistently.

Another advantage is that online surveys can combine quantitative and qualitative elements. Closed-ended questions can show how frequently students report certain behaviors, while open-ended questions can provide context about why those behaviors occur.

The survey should remain concise, use age-appropriate language, and avoid unnecessary technical terminology. Clear questions can improve comprehension and reduce the likelihood that participants misunderstand what is being asked.

Strengths and Limitations of the Study

The proposed study has several strengths. Combining closed-ended and open-ended questions provides both measurable information and deeper qualitative insight into student behavior. An electronic survey can also reach a relatively large student population without requiring individual interviews with every participant.

However, online surveys also have limitations. Researchers may have limited ability to verify the authenticity of responses or determine whether every participant fully understood each question. Because the study does not rely on interviews, researchers may have fewer opportunities to clarify responses or explore unexpected findings.

Self-reported behavior can also introduce social desirability bias. Students may report behaviors they believe are considered safe or responsible rather than describing what they actually do in everyday situations. These limitations should be considered when interpreting the study findings.

Sample and Population

Population of Interest

The population of interest consists of high school students who regularly use computers, smartphones, online learning platforms, social media, gaming services, and other digital technologies.

Because adolescents frequently interact with digital systems for education, communication, entertainment, and personal activities, they may encounter cybersecurity risks in multiple areas of daily life. Understanding their knowledge and habits can help educators develop cybersecurity education that reflects students’ real experiences.

Sample Participants

The proposed sample consists of 2,384 students in Grades 9 through 12 at Westview High School. Students who can read and write in English may participate regardless of gender, race, ethnicity, or religion.

Since the proposed participants are minors, researchers should give particular attention to informed consent, student assent, privacy, confidentiality, and institutional requirements governing research involving children and adolescents.

Participant Recruitment and Study Procedures

Participant Recruitment

Participants can be recruited through email invitations distributed with assistance from the school administration. The invitation should clearly explain the purpose of the study, what participants will be asked to do, the expected time commitment, and the voluntary nature of participation.

The recruitment message should also explain how participant information will be protected and identify any applicable consent or assent requirements.

Survey Procedures

Eligible students can receive an email containing study information and a link to the online survey. After completing the required consent or assent process, participants can answer the questions using school-provided digital devices.

The survey should collect only the information necessary for the research objectives. Avoiding unnecessary personally identifiable information can help strengthen privacy protections.

Participants should also be informed of their rights under the approved research protocol, including whether they can decline individual questions or withdraw from the study.

Cybersecurity Awareness Among High School Students

Cybersecurity awareness involves more than knowing technical terms. It includes understanding digital threats and consistently applying safe behaviors when using devices, applications, websites, and online accounts.

Students may encounter cybersecurity threats such as phishing, malware, credential theft, social engineering, unauthorized account access, and unsafe handling of personal information. Effective education should therefore connect cybersecurity concepts to situations students are likely to encounter in everyday life.

For example, students can learn why they should lock devices when stepping away, use strong and unique passwords, enable multifactor authentication when available, avoid suspicious links, and report unusual account activity.

Why Cybersecurity Education Matters in High School

Cybersecurity education can help students develop responsible digital habits before they enter college, the workforce, or other environments where they may handle increasingly sensitive information.

Adolescence can be an important period for developing technology-related habits because students often use digital platforms throughout the day. Connecting cybersecurity instruction to realistic situations can make the subject more relevant and easier to apply.

Rather than focusing exclusively on technical concepts, schools can emphasize practical decision-making. Students can learn how seemingly minor actions, such as leaving an account open on a shared computer, may create opportunities for unauthorized access.

The Risk of Leaving Devices Logged In

Leaving a device logged in when it is unattended can increase the risk of unauthorized access. If another person gains physical access to an unlocked computer, tablet, or smartphone, they may be able to view files, access applications, read messages, or use accounts that remain open.

Locking a device or logging out when appropriate creates an additional barrier against unauthorized use. The most appropriate practice may depend on the device, account, operating system, and environment, but the underlying principle is the same: unattended devices should not provide unnecessary access to sensitive information.

What Motivates Students to Practice Cybersecurity?

Students may follow cybersecurity practices for different reasons. Some may understand the consequences of cyber threats, while others may follow security procedures because they are required by parents, teachers, schools, or technology platforms.

Convenience can also influence behavior. A student may understand that locking a device is safer but fail to do so consistently because the behavior feels unnecessary or inconvenient.

Understanding these motivations can help educators design interventions that address actual barriers to secure behavior. For example, cybersecurity education may be more effective when students practice specific actions repeatedly rather than simply receiving information about potential threats.

Cybersecurity Drills and Interactive Learning

Cybersecurity drills can give students opportunities to practice responding to realistic situations. Activities might involve identifying phishing messages, responding to simulated security incidents, recognizing suspicious account activity, or deciding what information should and should not be shared online.

Interactive learning can make cybersecurity education more engaging. Serious games and simulations can allow students to practice decision-making in a controlled environment without exposing real accounts or systems to unnecessary risk.

Schools should ensure that simulations are age-appropriate, educational, and designed with appropriate privacy and ethical safeguards.

Benefits of the Study

The study can help educators understand how students perceive cybersecurity and which security behaviors they practice consistently or inconsistently.

Identifying gaps in cybersecurity awareness may allow schools to develop training that addresses real student needs instead of concentrating only on theoretical concepts. The findings may also reveal whether students are interested in interactive cybersecurity activities and drills.

Potential educational strategies could include:

• Short cybersecurity lessons integrated into existing classes

• Phishing and social-engineering awareness exercises

• Device-locking and account-security reminders

• Interactive simulations

• Age-appropriate cybersecurity games

• School-wide cybersecurity awareness campaigns

• Repeated practice of basic security behaviors

Benefits to the Cybersecurity and Education Fields

Cybersecurity awareness is relevant across education, healthcare, business, government, and virtually every other sector that depends on digital systems. Helping students develop responsible digital habits can prepare them for environments in which cybersecurity is part of everyday professional and personal activity.

Cybersecurity education can also benefit from collaboration across disciplines. Educators can develop age-appropriate learning strategies, cybersecurity professionals can identify relevant threats, software developers can design safer technologies, and behavioral researchers can examine the psychological factors that influence security decisions.

A stronger focus on human behavior is particularly valuable because cybersecurity depends not only on technical controls but also on how people interact with digital systems.

Implications for Future Cybersecurity Education

The results of this type of research could inform future school-based cybersecurity programs. If students demonstrate gaps in specific areas, educators can use those findings to create targeted interventions.

Future studies could also compare cybersecurity awareness across different grade levels, examine changes in behavior following cybersecurity training, or evaluate whether simulations and cybersecurity drills improve long-term security habits.

Researchers could further investigate whether students’ cybersecurity behaviors are associated with other forms of risk awareness and precautionary decision-making.

Conclusion

Cybersecurity awareness among high school students can help reduce risky digital behaviors and strengthen responsible technology use. A qualitative online survey can provide insight into students’ understanding of cybercrime, device-security practices, motivations for safe behavior, and interest in cybersecurity drills. Although self-reported online surveys have limitations, they can efficiently gather information from a large student population while allowing participants to explain their experiences in their own words.

The findings could help schools develop practical, engaging, and age-appropriate cybersecurity education. By combining cybersecurity knowledge with repeated practice, realistic scenarios, and interactive activities, educators can help students build safer digital habits that remain useful throughout higher education, employment, and everyday life.

Frequently Asked Questions

What is cybersecurity awareness among high school students?

Cybersecurity awareness among high school students refers to their understanding of digital threats and their ability to recognize and practice safe behaviors when using computers, smartphones, online accounts, applications, and other connected devices.

Why is cybersecurity education important in high school?

Cybersecurity education helps students develop safe digital habits at an early age. Because students rely heavily on technology for education, communication, entertainment, and social interaction, they need to understand threats such as phishing, malware, unauthorized account access, and unsafe device practices.

What are common cybersecurity risks for high school students?

Common risks can include phishing, weak or reused passwords, malware, social engineering, unauthorized account access, unsafe links, oversharing personal information, and leaving devices or accounts accessible to others.

Why is leaving a device logged in a cybersecurity risk?

An unattended logged-in device may allow someone with physical access to view files, applications, messages, or online accounts. Locking the device or logging out when appropriate can reduce the possibility of unauthorized access.

How can schools improve cybersecurity awareness?

Schools can strengthen cybersecurity awareness through classroom education, interactive exercises, simulations, cybersecurity drills, serious games, and repeated practice of basic security behaviors. Training should use realistic examples that students can relate to.

What is a cybersecurity drill?

A cybersecurity drill is a controlled educational activity that allows participants to practice responding to simulated cybersecurity situations. For students, drills might involve identifying phishing attempts, recognizing suspicious messages, or practicing appropriate incident-reporting procedures.

Why is an online survey useful for cybersecurity research?

An online survey allows researchers to collect information from many participants efficiently. It can also combine closed-ended questions for descriptive analysis with open-ended questions that allow participants to explain their attitudes, experiences, and behaviors.

What are the limitations of online surveys with high school students?

Limitations can include inaccurate or incomplete responses, difficulty verifying participants, misunderstanding of survey questions, lack of opportunities for follow-up interviews, and social desirability bias. Students may sometimes report what they believe is the expected behavior rather than what they normally do.

What is inductive thematic analysis?

Inductive thematic analysis is a qualitative research method used to identify recurring patterns and themes directly from participant responses. Researchers examine the collected data and develop themes based on the ideas and experiences expressed by participants.

How can cybersecurity habits help students in the future?

Strong cybersecurity habits can help students protect personal information, academic accounts, devices, and online identities. These skills can remain useful when students enter college, employment, healthcare, business, government, and other digitally connected environments.

References

Creswell, J. W., & Creswell, J. D. (2018). Research design: Qualitative, quantitative, and mixed methods approaches (5th ed.). SAGE Publications. https://us.sagepub.com/en-us/nam/research-design/book255675

National Institute of Standards and Technology. (2020). Cybersecurity framework for improving critical infrastructure cybersecurity (Version 1.1). U.S. Department of Commerce. https://www.nist.gov/cyberframework

PSYC FPX 4210 Assessment 5 Groups and Communities

National Institute of Standards and Technology. (2024). The NIST cybersecurity framework (CSF) 2.0. U.S. Department of Commerce. https://www.nist.gov/cyberframework

National Institute of Standards and Technology. (2020). Cybersecurity education and training. U.S. Department of Commerce. https://www.nist.gov/topics/cybersecurity

Phishing.org. (n.d.). What is phishing? https://www.phishing.org/what-is-phishing