This study evaluated cybersecurity awareness among ICT staff in universities in Kabul, Afghanistan, and examined whether awareness differed by demographic and professional factors. A quantitative descriptive survey design was employed, with data collected from 36 employees across 10 universities using a structured questionnaire distributed via Google Forms. Analysis in SPSS included descriptive statistics, the Kruskal–Wallis test, and the Mann–Whitney U test. Results indicated a moderate level of cybersecurity awareness overall. The highest mean score was reported for recognizing the importance of protecting sensitive data (M = 3.97, SD = 0.941), whereas the lowest was for effective communication of cybersecurity policies (M = 3.25, SD = 1.052). Inferential tests revealed no statistically significant differences in awareness across age (H(3) = 1.742, p = 0.628), education (H(2) = 0.399, p = 0.819), or work experience (H(3) = 4.826, p = 0.185). Similarly, no significant difference was observed between staff with and without prior cybersecurity training (U = 117.00, p = 0.379). These findings suggest that demographic and professional characteristics do not substantially influence cybersecurity awareness among the respondents. Universities should therefore prioritize strengthening institutional communication of cybersecurity policies and establishing continuous, structured awareness programs to enhance organizational cyber resilience and equip ICT staff to safeguard institutional data.
Copyrights © 2026