Understanding human factors in cyber security as a dynamic system