Digital transformation era: Impact of cybersecurity on workplace mental health
Abstract
The digital transformation of workplaces has profoundly impacted organisations around the world, introducing not only new efficiencies but also significant psychological and psychosocial risks for employees. While cybersecurity has traditionally has been considered as a technical concern, it increasingly poses mental health challenges for both IT professionals and general staff, particularly in the context of remote work and complex security protocols. This study aimed to identify and systematise common mental health issues related to cyber threats in organisational settings and to explore viable strategies for their prevention and mitigation. Combining a literature review with a targeted empirical survey, the research offered a view of the interaction between cybersecurity and employee well-being. Participants were non-cybersecurity professionals tasked with responding to cyber threats, providing unique insight into the mental strain associated with such responsibilities. Using inductive qualitative analysis and Likert-scale-based statistical evaluation, the study reveals that systemic, organisational-level interventions – such as clear cybersecurity policies, fairness in breach response, and appropriate training – are perceived as more effective in supporting mental health than individual psychological support services. These findings highlighted the urgent need to frame cybersecurity not only as a technical challenge but also as a core psychosocial issue. The research contributes to the growing field of cyberpsychology and offers practical recommendations for enhancing both digital and psychological resilience in modern organisations
References
- American Sociological Association’s Code of Ethics. (1997). Retrieved from https://www.asanet.org/about/ethics/.
- Arora, S., & Hastings, J.D. (2024). A survey-based quantitative analysis of stress factors and their impacts among cybersecurity professionals. In Proceedings of the 58th annual Hawaii international conference on system sciences (pp. 6161-6160). Waikoloa Village: Hilton. doi: 10.48550/arXiv.2409.12047.
- Atrian, A., & Ghobbeh, S. (2023). Technostress and job performance: Understanding the negative impacts and strategic responses in the workplace. ArXiv.. doi: 10.48550/arXiv.2311.07072.
- Ayyagari, R., Grover, V., & Purvis, R. (2011). Technostress: Technological antecedents and implications. MIS Quarterly, 35(4), 831-858. doi: 10.2307/41409963.
- Blau, P.M. (1964). Justice in social exchange. Sociological Inquiry, 34(2), 193-206. doi: 10.1111/j.1475-682X.1964. tb00583.x.
- Boss, S.R., Galletta, D.F., Lowry, P.B., Moody, G.D., & Polak, P. (2015). What do users have to fear? Using fear appeals to engender threats and fear that motivate protective security behaviors. MIS Quarterly, 39(4), 837-864. doi: 10.25300/MISQ/2015/39.4.5.
- Brod, C. (1984). Technostress: The human cost of the computer revolution. Boston: Addison-Wesley.
- Cheng, L., Li, Y., Li, W., Holm, E., & Zhai, Q. (2013). Understanding the violation of IS security policy in organisations: An integrated model based on social control and deterrence theory. Computers & Security, 39, 447-459. doi: 10.1016/j.cose.2013.09.009.
- D’Arcy, J., Herath, T., & Shoss, M.K. (2014). Understanding employee responses to stressful information security requirements: A coping perspective. Journal of Management Information Systems, 31(2), 285-318. doi: 10.2753/ MIS0742-1222310210.
- Demerouti, E., Bakker, A.B., Nachreiner, F., & Schaufeli, W.B. (2001). The job demands-resources model of burnout. Journal of Applied Psychology, 86(3), 499-512. doi: 10.1037/0021-9010.86.3.499.
- Greenberg, J. (1987). A taxonomy of organisational justice theories. Academy of Management Review, 12(1), 9-22. doi: 10.5465/amr.1987.4306437.
- Hadlington, L. (2017). Human factors in cybersecurity; examining the link between internet addiction, impulsivity, attitudes towards cybersecurity, and risky cybersecurity behaviours. Heliyon, 3(7), article number e00346. doi: 10.1016/j.heliyon.2017.e00346.
- Herath, T., & Rao, H.R. (2009). Protection motivation and deterrence: A framework for security policy compliance in organisations. European Journal of Information Systems, 18(2), 106-125. doi: 10.1057/ejis.2009.6.
- Ifinedo, P. (2012). Understanding information systems security policy compliance: An integration of the theory of planned behavior and the protection motivation theory. Computers & Security, 31(1), 83-95. doi: 10.1016/j.cose.2011.10.007.
- Ihnatenko, K., & Sadzaglishvili, S. (2023). The digitalization of social services in response to the war in Ukraine. Social Work and Education, 10(3), 282-291. doi: 10.25128/2520-6230.23.3.2.
- Ivanova, O.S., Kit, N., & Storozhyk, M. (2024). Philosophy of education in the context of digital transformation of public life. Humanities Studios: Pedagogy, Psychology, Philosophy, 12(1), 141-148. doi: 10.31548/ hspedagog15(1).2024.141-148.
- Johnston, A.C., Söllner, M., McBride, M., & Carter, L. (2016). Dispositional and situational factors: Influences on information security policy violations. European Journal of Information Systems, 25(3), 231-251. doi: 10.1057/ ejis.2015.15.
- Karasek, R.Jr. (1979). Job demands, job decision latitude, and mental strain: Implications for job redesign. Administrative Science Quarterly, 24(2), 285-308. doi: 10.2307/2392498.
- Khadzhyradieva, S., Todorova, M., Staikutsa, S., Tsybukh, L., & Lukiianchuk, A. (2024). Analysis of cyber-psychological protection programs in the education system: Role, limitations, and prospects. Salud, Ciencia y Tecnología – Serie de Conferencias, 3, article number 648. doi: 10.56294/sctconf2024.648.
- Molino, M., Ingusci, E., Signore, F., Manuti, A., Giancaspro, M.L., Russo, V., & Cortese, C.G. (2020). Wellbeing costs of technology use during Covid-19: The role of psychological detachment, technostress, and burnout. Sustainability, 12(15), article number 5911. doi: 10.3390/su12155911.
- Moore, P.V., Upchurch, M., & Whittaker, X. (2018). Humans and machines at work: Monitoring, surveillance and automation in contemporary capitalism. Cham: Palgrave Macmillan. doi: 10.1007/978-3-319-58232-0.
- Nurse, J.R.C., Williams, N., Collins, E., Panteli, N., Blythe, J., & Koppelman, B. (2021). Remote working pre- and post-COVID-19: An analysis of new threats and risks to security and privacy. In HCI international 2021 – posters. Communications in computer and information science (pp. 583-590). Cham: Springer. doi: 10.1007/978-3-03078645-8_74.
- Posey, C., Bennett, R.J., & Roberts, T.L. (2011). Understanding the mindset of the abusive insider: An examination of insiders’ causal reasoning following internal security changes. Computers & Security, 30(6-7), 486-497. doi: 10.1016/j.cose.2011.05.002.
- Ragu-Nathan, T.S., Tarafdar, M., Ragu-Nathan, B.S., & Tu, Q. (2008). The consequences of technostress for end users in organisations: Conceptual development and empirical validation. Information Systems Research, 19(4), 417-433. doi: 10.1287/isre.1070.0165.
- Rhee, H.-S., Kim, C., & Ryu, Y.U. (2009). Self-efficacy in information security: Its influence on end users’ information security practice behavior. Computers & Security, 28(8), 816-826. doi: 10.1016/j.cose.2009.05.008.
- Rogers, R.W. (1975). A protection motivation theory of fear appeals and attitude change. The Journal of Psychology, 91(1), 93-114. doi: 10.1080/00223980.1975.9915803.
- Safa, N.S., & Von Solms, R. (2016). An information security knowledge sharing model in organisations. Computers in Human Behavior, 57, 442-451. doi: 10.1016/j.chb.2015.12.037.
- Salanova, M., Llorens, S., & Cifre, E. (2013). The dark side of technologies: Technostress among users of information and communication technologies. International Journal of Psychology, 48(3), 422-436. doi: 10.1080/00207594.2012.680460.
- Söllner, M., Hoffmann, A., & Leimeister, J.M. (2016). Why different trust relationships matter for information systems users. European Journal of Information Systems, 25(3), 274-287. doi: 10.1057/ejis.2015.17.
- Sonnentag, S., Dormann, C., & Demerouti, E. (2010). Not all days are created equal: The role of daily job demands and resources for employee well-being. Retrieved from https://www.researchgate.net/publication/254880606_ Not_all_days_are_created_equal_The_concept_of_state_work_engagement.
- Spagnoli, P., Molino, M., Molinaro, D., Giancaspro, M.L., Manuti, A., & Russo, V. (2020). Workaholism and technostress during the COVID-19 emergency: The crucial role of the leaders on remote working. Frontiers in Psychology, 11, article number 620310. doi: 10.3389/fpsyg.2020.620310.
- Tarafdar, M., Cooper, C.L., & Stich, J.F. (2019). The technostress trifecta – techno eustress, techno distress and design: Theoretical directions and an agenda for research. Information Systems Journal, 29(1), 6-42. doi: 10.1111/isj.12169.
- Vasilenko, M., Novikov, V., Rachuk, V., & Slatvinska, V. (2020). Cybersecurity in the manifestations of risks during the pandemic period: Сondition and genesis. Bulletin of Cherkasy State Technological University, 25(3), 30-39. doi: 10.24025/2306-4412.3.2020.214774.