This paper reviews academic literature on the both individual differences and contextual factors that influence susceptibility to cyber attacks, including self-awareness, self-control, security expertise, motivation, trust and attitudes to risk.