EFFECTIVENESS OF CYBERSECURITY AWARENESS PROGRAMS IN LAW ENFORCEMENT AND SECURITY AGENCIES: A CASE STUDY OF A NAMIBIAN SECURITY ORGANISATION

Abstract

Security agencies increasingly depend on interconnected digital systems for command, administration and communication, yet the human dimension of cybersecurity is routinely under-resourced relative to technical controls. This paper reports a qualitative case study examining the effectiveness of cybersecurity awareness programmes within a Namibian security organisation. Data were gathered from twenty purposively sampled personnel through semi-structured interviews, direct observation and document analysis, and were analysed thematically within an interpretive paradigm. Protection Motivation Theory supplied the theoretical lens for interpreting participants’ threat and coping appraisals. The findings indicate that existing awareness activity is fragmented, largely confined to information-technology staff, and has not cultivated an organisation-wide security culture. Social media use emerged as a particularly acute vulnerability, with the overwhelming majority of respondents unaware of the conduct rules that govern their digital behaviour. The paper argues that awareness alone, without accompanying competence-building, does not reliably translate into protective behaviour, and it situates these findings within the wider empirical literature on security awareness effectiveness. Practical and policy implications are offered for security agencies operating in resource-constrained developing-country contexts.