The Effect of Countermeasure Readability on Security Intentions

Abstract

Human failure is a primary contributor to successful cyber attacks. For any cybersecurity initiative, it is therefore vital to motivate individuals to implement secure behavior. Research using protection motivation theory (PMT) has given insights into what motivates people to safeguard themselves in cyberspace. Recent PMT results have highlighted the central role of the coping appraisal in the cybersecurity context. In cybersecurity, we cope with threats using countermeasures. Research has shown that countermeasure awareness is a significant antecedent to all coping appraisal elements. Yet, although awareness plays a key role within the PMT framework, it is generally challenging to influence. A factor that is easy to influence is countermeasure readability. Earlier work has shown the impact of readability on understanding and that readability metrics make measuring and improving readability simple. Therefore, our research aims to clarify the relationship between countermeasure readability and security intentions. We propose an extended theoretical framework and investigate its implications using a survey. In line with related studies, results indicate that people are more likely to have favorable security intentions if they are aware of countermeasures and are confident in their ability to implement them. Crucially, the data show that countermeasure readability influences security intentions. Our results imply that cybersecurity professionals can utilize readability metrics to assess and improve the readability of countermeasure texts, providing an actionable avenue towards influencing security intentions.

Cyberattacks in Smart Grids: Challenges and Solving the Multi-Criteria Decision-Making for Cybersecurity Options, Including Ones That Incorporate Artificial Intelligence, Using an Analytical Hierarchy Process

“…Various models and metrics offer a quantitative approach to measuring the implications of cybersecurity in smart grids [203] • User Awareness and Training Metrics: these measure the effectiveness of cybersecurity education programs through completion rates, campaign frequency, and policy adherence.…”

Readability Metrics for Machine Translation in Dutch: Google vs. Azure & IBM

“…For example, word prevalence, entropy, perplexity, word count, particular character count, word probability, morpheme count, word frequencies, named entity recognition, sentence analysing features and many more. Some tooling uses more than 200 features [12], or even more than 400 formulas [5].…”

Volitional Cybersecurity

“…Second, this study demonstrated that the majority of prior studies (84%) focused on two goals: information security policy compliance and management information security. It shows that researchers are less prone to focus on other topics, such as the effectiveness of information security communication (Smit et al, 2021), SME awareness-raising, and SMEs' risk perception. However, these topics are important, and studies show that information security communication and risk perception impact CEOs' decision-making, motivation to comply, and effective protection (Renaud and Weir, 2016 [P6]; Barlette and Jaouen, 2019 [P16]).…”