# Exploring the Frontiers of Cybersecurity Behavior: A Systematic Review of Studies and Theories
## 6 Conclusions and Future Research Agendas  
The increasing number of cybercrimes and security incidents has promoted the concept of cybersecurity behavior to protect individuals and organizations from such threats efficiently. However, this topic is still in its infancy stage and requires further investigation. Therefore, this systematic review was conducted to gain deeper insights into the common research themes, external factors affecting cybersecurity behavior, dominant technologies and services, main research methods, active countries, and participants. We believe this review will be a valuable guide for scholars and practitioners in providing the existing gaps and suggesting opportunities for further research. This review sheds light on several gaps in research. First, the PMT was the most frequently used theory in understanding the determinants influencing cybersecurity behavior. Most of the examined studies concentrated on the role of security determinants, such as perceived severity, response efficacy, and perceived vulnerability, in understanding cybersecurity behavior, with little attention paid to the role of social, psychological, and technical determinants. This phenomenon requires the need for more research that involves theories covering these factors. Second, insufficient knowledge of what affects cybersecurity awareness and compliance behavior opens the door for further research trials. Third, we have noticed that the role of moderators is neglected in the extant literature. Therefore, we suggest that further research involves the role of moderators as their absence might raise inconsistent effects of the factors across studies [102]. Fourth, most of the examined studies were conducted in individualistic contexts with limited exposure to collectivistic societies. This issue encourages further empirical research to be conducted in those contexts. Fifth, 95% of the analyzed articles have relied on quantitative research methods through questionnaire surveys for data collection. Therefore, further empirical research is encouraged to consider mixed methods as relying on questionnaire surveys only might not be adequate to explain the causal relationships among the variables in the research model. Sixth, since most of the reviewed studies have relied on conventional analysis techniques, such as SEM, more advanced analytical methods can be used in future studies. For example, machine learning algorithms can analyze large amounts of data and identify interesting patterns in these data [103, 104]. Machine learning and deep learning play essential roles in securing computer systems from unauthorized access and managing system penetration by anticipating and comprehending the behavior and traffic of harmful software [105]. Therefore, future research might use machine learning algorithms to analyze individual cybersecurity behavior by processing large amounts of data to identify patterns and correlations that could indicate potential security threats. Seventh, 56% of the analyzed studies have focused on organizational employees in explaining what affects cybersecurity behavior. This observation provides evidence that understanding what impacts cybersecurity behavior at the individual level is still in short supply, which requires further investigation. To address the gaps in cybersecurity behavior research at the individual level, this review proposes a number of future research agendas. Future research should focus on the impact of social and psychological factors, such as peer influence, cultural values, and individual beliefs and attitudes, on cybersecurity behavior. Technical determinants, such as technology literacy and accessibility, should also be considered. Additionally, further research should be conducted to understand the factors influencing awareness and compliance with cybersecurity best practices and policies. This can include studies on the impact of training and education programs and the role of incentives and consequences.