Demographic Differences in IT Security Risk-taking: Implications for Targeted Training and Prevention

Abstract

This paper examines the demographic determinants of risk-taking behavior related to IT security, with a particular focus on the role of age and gender. The analysis is based on a modified DOSPERT questionnaire supplemented with an IT security subscale, which allows for statistical control of general risk-taking dimensions. The empirical study involved 772 university students. The results of multivariate regression analyses show that both age and gender have independent and significant explanatory power in the case of IT security risk-taking, even when controlling for perceived benefits, perceived risks, and probability of action. These results suggest that IT security decisions are not solely based on psychological decision-making mechanisms but are also structured by stable demographic characteristics. The study draws practical conclusions for human resource management, IT security training, and targeted education, emphasizing the need to take into account differences between user groups.