Volition is deliberate choice: an action taken intentionally, rather than by accident, habit, or default behavior. In cybersecurity, that distinction matters because a control is stronger when a person or system can show that a decision was made on purpose. Security teams use volition to support accountability: who approved access, why a setting was changed, and what evidence shows the choice was reviewed.
Attackers often exploit the absence of volition by relying on unsafe defaults, prechecked options, or rushed click-through decisions that users accept without thinking. Defenders counter this by adding intentional checkpoints such as change approvals, privilege reviews, MFA prompts, and audit logs tied to a specific decision. In privacy governance, including GDPR accountability, volition helps turn policy into provable responsibility: not just what was done, but what was knowingly chosen and why.