Tell Me A Story: The Effects That Narratives Exert on Meaningful-Engagement Outcomes in Antiphishing Training

Simple item page
dc.contributor.authorSchuetz, Sebastianen
dc.contributor.authorHull, Daviden
dc.contributor.authorLowry, Paul Benjaminen
dc.date.accessioned2023-04-10T14:54:38Zen
dc.date.available2023-04-10T14:54:38Zen
dc.date.issued2023en
dc.date.updated2023-04-10T00:21:50Zen
dc.description.abstractAntiphishing training is a critical element of an organization’s security posture. Yet, its effectiveness is often limited by trainees’ perception that it is boring and unengaging, which weakens their attention and thus diminishes learning outcomes. We examine whether antiphishing training that uses narratives—stories—can make training more engaging and improve training outcomes. To that end, we conduct an experiment to compare the effects of a narrative antiphishing training against an existing non-narrative training as well as a no-training control group. Comparing against the control group, we found both training models to be effective. However, comparing the two training models, the experiment showed that the narrative training engenders higher levels of curiosity among trainees and higher levels of phishing-detection self-efficacy and phishing-detection ability. Taken together, these findings show that antiphishing training in specific, and perhaps security training in general, can be improved using narratives.en
dc.description.versionAccepted versionen
dc.format.mimetypeapplication/pdfen
dc.identifier.doihttps://doi.org/10.1016/j.cose.2023.103252en
dc.identifier.orcidLowry, Paul [0000-0002-0187-5808]en
dc.identifier.urihttp://hdl.handle.net/10919/114451en
dc.identifier.volume2023en
dc.language.isoenen
dc.publisherElsevieren
dc.rightsIn Copyrighten
dc.rights.urihttp://rightsstatements.org/vocab/InC/1.0/en
dc.subjectsecurityen
dc.subjectAnti-phishing security trainingen
dc.subjectnarrativesen
dc.subjectinstrumental outcomesen
dc.subjectexperiential outcomesen
dc.subjectphishingen
dc.titleTell Me A Story: The Effects That Narratives Exert on Meaningful-Engagement Outcomes in Antiphishing Trainingen
dc.title.serialComputers & Securityen
dc.typeArticle - Refereeden
dc.type.dcmitypeTexten
dc.type.otherArticleen
dcterms.dateAccepted2023-04-04en
pubs.organisational-group/Virginia Techen
pubs.organisational-group/Virginia Tech/Pamplin College of Businessen
pubs.organisational-group/Virginia Tech/Pamplin College of Business/Business Information Technologyen
pubs.organisational-group/Virginia Tech/All T&R Facultyen
pubs.organisational-group/Virginia Tech/Pamplin College of Business/PCOB T&R Facultyen

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
2023-Apr C&S narrative security training POST-PRINTS + appendices.pdf
Size:
1.35 MB
Format:
Adobe Portable Document Format
Description:
Accepted version
Download

Collections

All Faculty Deposits
Scholarly Works, Business Information Technology