Autonomy Motivators, Serious Games, and Intention Toward ISP Compliance

Abstract

The growing number of security breaches has become a major concern in organisations. Most often, such security breaches are related to internal employees due to their indirect or direct actions leading to information security policy (ISP) violations. Therefore, understanding employees’ security behaviour and intrinsic motivation towards ISP compliance with respect to autonomy is critical. This study aims to find out whether the autonomy intrinsic motivator can be influenced by the Decisions and Disruptions (D-D) table-top game to enhance security awareness and, in turn, reinforce behavioural intention towards ISP compliance. We developed pre- and post-assessment tests on intrinsic motivation to find out whether there is a significant improvement in test scores after participants experience D-D gameplay. Thirty postgraduate students participated in the study. Overall results confirmed that the autonomy intrinsic motivator is positively influenced by the game and has a positive effect on the behavioural intention to comply with ISPs.

Security Awareness Level Evaluation of Healthcare Participants Through Educational Games

“…The causes are diverse and of different nature, for which the majority of incidents related to healthcare originate internally, and for this study, it has been detected through the review of [6,7] that this is due to the lack of an educational methodology in security awareness training.…”

Moving beyond cyber security awareness and training to engendering security knowledge sharing

“… 2007 ). Security games (SGs) give employees the opportunity to enjoy learning and to collaborate, as the games comprise a form of intrinsic motivation (Alzahrani and Johnson 2019 ; Hart et al. 2020 ; Aladawy et al.…”

“…Because of their enjoyment of the game, the majority completed their tasks, as shown in Table 8 . Most previous studies have overlooked intrinsic motivational elements, which refer to doing something purely for the sake of intrinsic interest or enjoyment (Alzahrani and Johnson 2019 ; Son 2011 ). Moreover, some participants shared their experiences with the STOW, commenting that not only was it fun and facilitated communication, but also did not take them too long to complete the tasks.…”

“…Finally, as Alkaldi and Renaud Alkaldi and Renaud ( 2019 ) confirmed, enjoyment plays a vital role in achieving behavioural change. Moreover, a satisfactory SDT is effective at encouraging such compliance in organisations Alzahrani and Johnson ( 2019 ). Our study confirmed the positive impact of perceived autonomy, such as changing security training to gamification that includes features mentioned in the previous sections (Alahmari et al.…”

“…However, a limited study conducted in a security context confirmed that autonomy positively affects human behaviour changes. According to recently published policy compliance research, satisfying SDT successfully encourages such compliance in organisations (Alzahrani and Johnson 2019 ; Alzahrani et al. 2018 ).…”