From Fear to Control: Developing a Three-Factor Scale for Cybersecurity Anxiety (CybAS)

Cybersecurity anxiety captures the persistent worry, stress and perceived lack of control individuals experience when navigating digital threats. While prior research has examined privacy concerns, computer anxiety and related constructs, no validated instrument exists to specifically measure anxiety in cybersecurity contexts. We address this gap with the Cybersecurity Anxiety Scale (CybAS), a 15-item psychometric instrument developed through literature review, item generation, and multiple survey studies. CybAS consists of three factors: Present (current concerns), Future (anticipated threats), and Control (perceived control over outcomes). Analyses confirm strong reliability and validity, and the concise format makes CybAS suitable for both research and applied settings. Beyond measurement, CybAS offers HCI researchers a diagnostic framework for detecting misalignments between users' mental models and security technologies, enabling the design of anxiety-aware security systems that directly address emotional barriers, bridging the gap between usability, trust, and security.

• Human-centered computing → HCI design and evaluation methods; User studies; • Security and privacy → Usability in security and privacy.