A new open access research paper published in the Journal of Business Research has looked at whether there is any evidence for gamification improving the way that organizations train employees on information security.
The paper, ‘Gamification in workforce training: Improving employees’ self-efficacy and information security and data protection behaviours’, was written by researchers from the Faculty of Business and Economics of the University of Zaragoza and the Faculty of Computer Science of the Augsburg University of Applied Sciences.
The abstract reads as follows:
This research aims to address two questions: (1) how can gamification strategies increase success of e-training systems and enhance employees’ information security and data protection self-efficacy? and (2) do gamified e-training systems improve employees’ information security and data protection behaviours? Drawing on the information systems success literature, this research offers new insights into gamified information security and data protection e-trainings through two studies. Study 1 analyses the perceptions of 1,178 employees of an international company using structural equation modelling. The results show that gamification significantly influences information quality, system quality and enjoyment which, in turn, increase perceived usefulness and satisfaction. Perceived usefulness also enhances satisfaction, and both variables improve security self-efficacy. Study 2 investigates the employees’ behaviours by analysing their responses to phishing. The results confirm that gamified e-training improves employees’ security behaviours, as it reduces the percentage of employees who click on a phishing attack and promotes positive reactions.
