Human Factors in Cybersecurity and Privacy: A Systematic Review with Implications for Zimbabwe’s Digital Transformation

Abstract

Across the globe, cybersecurity and privacy have become an important aspect of sustainable digital transformation as governments and organisations rely on digital technologies despite the growing sophistication of cyber threats. The study examined how human factors contribute to the persistence of cyber risks despite having cybersecurity controls being put in place within Zimbabwe's evolving digital landscape.  The study was hinged on the Socio-Technical Systems Theory. It employed a qualitative systematic literature review that followed the PRISMA 2020 framework. Literature published between 2015 and 2025 was searched across various academic databases. From 446 records identified, 35 studies met the inclusion criteria and were synthesised using thematic analysis. The review established that cybersecurity awareness, risk perception, organisational culture, system usability and insider-related behaviours are the main human factors limiting the effectiveness of technological security controls. The findings also revealed that persistent cyber risks arise from the interaction between human behaviour, organisational practices and technology instead of just technological shortcomings. The review therefore concludes that sustainable cybersecurity requires integrated human-centred approaches that align technological safeguards with behavioural and organisational interventions. It recommends institutionalising behavioural cyber risk assessment, strengthening organisational security culture, embedding user-centred security design and promoting context-specific research to enhance Zimbabwe's cyber resilience and support secure digital transformation.