The Influence of Cybersecurity Fatigue on Students’ Compliance with Cybersecurity Measures

This study investigates the influence of cybersecurity fatigue on university students’ compliance with cybersecurity measures. Cybersecurity fatigue arises from the constant need to comply with numerous security measures, leading to feelings of fatigue and a decrease in motivation to adhere to those very measures intended to maintain cybersecurity. The repetitive nature of security tasks and the constant influx of security advice contribute to this fatigue. Cybersecurity fatigue is a critical concern in modern digital environments, especially within higher education institutions. Using a single case qualitative case study, we conducted semi-structured interviews with 10 students from various faculties both at undergraduate and postgraduate levels. We used thematic analyzes in combination with the NVivo software to analyze our qualitative data. Our findings reveal that students, despite understanding the importance of cybersecurity, experience frustrations and annoyance with repetitive security procedures, particularly multi-factor authentication. This often leads to noncompliant behaviors, such as reusing passwords and ignoring updates, ultimately weakening the overall cybersecurity posture. The study emphasizes the urgent need for institutions to recognize and address cybersecurity fatigue by implementing strategies that balance security needs with user experience to foster a secure, yet less burdensome digital environment. Student-driven recommendations to address cybersecurity fatigue in higher education institutions are also discussed.