Cybersecurity From The Users' Perspective

In modern conditions, a significant part of human activity is carried out with the help of information technology. The data stored and processed within information systems not only grows in volume but also changes in quality, becoming a valuable asset for both citizens and society. In this context, the security of communication infrastructures and information systems becomes a necessary prerequisite for further progress. Educational institutions hold personal data about their employees and students, as well as information on academic achievements. This data is a valuable resource that must be safeguarded in the same way as financial assets. Two key European Union directives from 2016 and 2022 aim to increase the overall level of cybersecurity across the Union, placing significant emphasis on responses following cyber incidents. Therefore, awareness and communication are essential factors for ensuring information security. The main provisions of these directives are also included in the Bulgarian Cybersecurity Act, effective since 2018. The purpose of this report is to determine students’ level of awareness regarding best practices and appropriate responses in cases of cyber incidents, based on an analysis of survey results examining students'experiences with cyber incidents and their subsequent actions. The knowledge gained will contribute to a better understanding of the need for enhanced cybersecurity measures and risk management in the context of university information resources.