Persuasive Information Security. A Behavior Change Support System to Help Employees Protect Organizational Information Security

Abstract. Digital information is an important asset in the corporate world. Organizations typically devise policies and guidelines to help employees protect the security of such information. Complying with these policies can often be confusing and difficult and may obstruct the task at hand, thus potentially leading employees to circumvent or ignore these policies. Commercial technology and training programs to mitigate this issue suffer from various shortcomings. To overcome these limitations, we present a Behavior Change Support prototype that implements six persuasive features: Security Points, Security Quiz, Challenges, Statistics, Personalization, and Risk Communication. Evaluation of the prototype established persuasive security as a promising approach for influencing user attitudes and behaviors regarding secure work practices. We apply the findings to offer suggestions for how the six persuasive features could be further enhanced.

• Type: Journal
• Year: 2015
• Where: PERSUASIVE
• Authors: Marc Busch, Sameer Patil, Georg Regal, Christina Hochleitner, Peter Fröhlich, Manfred Tscheligi
• Keywords: Emerging Technology, PERSUASIVE 2015