Conhecimento, percepção e lacunas na formação prática em segurança da informação: um estudo com discentes universitários de tecnologia da UFC campus Russas

Abstract

This study investigates the relationship between technical knowledge, risk perception, and information security behaviors among undergraduate students in Computer Science and Software Engineering at the Federal University of Ceará – Russas Campus. It is based on the premise that technical knowledge, although necessary, is not, by itself, sufficient to ensure the consistent adoption of secure practices in digital environments. The research adopted a mixed-methods approach, employing structured questionnaires based on the HAIS-Q and SeBIS models, as well as guidelines provided by CERT.br. Quantitative data were analyzed using descriptive statistics, correlation analysis, and group-based analysis, while open-ended responses were examined through thematic content analysis. The interpretation of the results was guided by the Knowledge–Attitude–Behavior model and Protection Motivation Theory. The findings indicate that factors such as convenience, time pressure, risk normalization, and institutional limitations influence the adoption of insecure digital behaviors, even among students who possess knowledge of the associated risks. It is concluded that strengthening information security culture in technological higher education requires the implementation of continuous educational strategies, with emphasis on the human factor.