Cyber Hygiene: The Case of the SANDF

Abstract

The landscape of cyberspace is growing at an incredibly fast pace, and it has penetrated deep into every aspect of society. In order to address this issue, the current study took a unique approach of focusing on cyber-hygiene practices among senior South African military officers, which is a largely understudied subject in the South African armed forces domain. The study was guided by the securitisation theory, which emphasises that the military plays a key role in orchestrating a “security move”. The South African National Defence College was selected as the site of importance where senior military officers undergo educational training. The military is considered a unique population, and is therefore often overlooked. The aim of the study was to explore how military officers in particular conceptualise cyber hygiene and how cybersecurity behaviour is practised in the context of the South African National Defence Force. The study utilised a qualitative approach, and conducted ten semi-structured interviews. It was found that cybersecurity awareness was key in the formation of cyber hygiene and locating potential cyber threats. These factors play a role in the development of security behaviour that is able to identify vulnerabilities in the system and within their own behaviour. Cultivating cybersecurity in the organisation was found to be challenged by knowledge and experience relating to cyberspace usage. The study also found that senior military officers practise cyber hygiene by taking appropriate security procedures to protect themselves and the organisation; however, organisational challenges prevent the full application of this practice.