Online safety message failing to get through to women

Despite being significantly more affected by discriminatory and hateful content or harassment online, cyber security and privacy advice is failing to cut through to women, with the end result that they tend to be less likely to take steps to protect themselves, according to research conducted at King’s College London (KCL) and the University of Westminster

Kovila Coopamootoo, a lecturer in computer science at KCL, and Madelene Ng, a lecturer in forensic psychology at the University of Westminster, found evidence of a significant gender gap in online safety advice and technology around how both men and woman seek out advice, and ultimately engage with security and privacy technology.

In their paper, Un-equal online safety? A gender analysis of security and privacy protection advice and behaviour patterns, they argue that current official digital safety advice and guidance available from the likes of Action Fraud or the National Cyber Security Centre (NCSC) tends not to be inclusive of women’s particular needs.

“Women make up over 50% of the population, yet they’re not able to effectively engage with digital safety advice, and security [and] privacy technologies,” said Coopamootoo.

“The stark gender gap in access and participation, evidenced in our research, highlights the gender norms at play in online safety and the role that gender identity plays in staying safe online.”

The researchers found a significant difference in how men and women access online safety advice. About 76% of woman said their go-to approach would be to seek guidance from family members or intimate social connections, compared with less than 24% of men, while 70% of men said they sought advice from online sources, versus only 38% of women.

While there is nothing inherently wrong or risky with seeking cyber security advice from family and friends, said the researchers, there is no guarantee that such advisors have any special knowledge or security skills themselves. They may, for example, inadvertently misinform, or resort to scaremongering or stereotypes.

Coopamootoo and Ng recommended that policymakers consider increasing their efforts towards ensuring the online advice ecosystem is inclusive of the various needs of women, above and beyond advice tailored for specific threat scenarios such as cyber abuse linked to controlling behaviour or domestic violence.

The design of such advice, they said, needs to be relevant to diverse women’s assessment and response to threats, and trustworthiness and a sense of emotional support need to be designed into digital advice, and even security and privacy technology – prior work has shown that communication that is preceded by emotional support is perceived as being of higher quality.

As an example, they said, the language used in online safety advice could be made more representative of the groups of women it is supposed to serve, as opposed to being overly technical.

Additionally, they said, online sources and priority advice should be standardised, and subject to a process of continuous revision, given the current threat landscape facing women.