International Journal For Multidisciplinary Research
E-ISSN: 2582-2160
•
Impact Factor: 9.24
A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal
Home
Research Paper
Submit Research Paper
Publication Guidelines
Publication Charges
Upload Documents
Track Status / Pay Fees / Download Publication Certi.
Editors & Reviewers
View All
Join as a Reviewer
Get Membership Certificate
Current Issue
Publication Archive
Conference
Publishing Conf. with IJFMR
Upcoming Conference(s) ↓
Conferences Published ↓
DePaul-2026
IC-AIRCM-T3-2026
NSSFIGTMA-2025
SPHERE-2025
AIMAR-2025
SVGASCA-2025
ICCE-2025
Chinai-2023
PIPRDA-2023
ICMRS'23
Contact Us
Plagiarism is checked by the leading plagiarism checker
Call for Paper
Volume 8 Issue 4
July-August 2026
Indexing Partners
It End-user Training Framework for Mitigating Human-related Internal Cybersecurity Risks: A Case Study of Uganda Coffee Ltd
| Author(s) | Mr. Musa Nsubuga, Dr. Ali Najib, Dr. David Kakeeto, Mr. Rogers Kimera |
|---|---|
| Country | Uganda |
| Abstract | This study examined how IT end-user training affects human-related cybersecurity risk at Uganda Coffee LTD, prompted by a 2021 ransomware attack that entered through a spear-phishing email despite existing firewalls, IDS, and antivirus controls. Using a mixed-methods design, employee questionnaires (n=108), key informant interviews (n=5), and five years of phishing simulation data (1,400 records, 2021–2025), the research found that untrained employees phished at 22.1% versus 7.3% for trained employees, with 91.7% of untrained staff falling into the High Risk category compared to none of the trained staff (χ²(4)=99.063, p<0.001, Cramér's V=0.677). and all five key informants linked past security incidents, including the 2021 breach, to training gaps, Based on these findings, the study proposes a five-phase, mandatory, quarterly, role-differentiated training framework, projected to cut the overall phish rate from 11.0% to within the 4–8% industry benchmark and eliminate High Risk classifications among trained staff within 24 months, contributing original empirical evidence on human-factor cybersecurity risk from an East African agri-commodity setting. |
| Keywords | Cybersecurity Training, Human-Related Cybersecurity Risks, End-User Awareness, Phishing, Human Error Theory, Protection Motivation Theory, Phish Rate, Phish Report. |
| Field | Computer > Network / Security |
| Published In | Volume 8, Issue 4, July-August 2026 |
| Published On | 2026-07-19 |
| DOI | https://doi.org/10.36948/ijfmr.2026.v08i04.83880 |
Share this

E-ISSN 2582-2160
CrossRef DOI prefix of IJFMR is 10.36948/ijfmr
All research papers published on this website are licensed under Creative Commons Attribution-ShareAlike 4.0 International License, and all rights belong to their respective authors/researchers.
Powered by Sky Research Publication and Journals