What Motivates and Discourages Employees in Phishing Interventions: An Exploration of
summary
Study applies Expectancy-Value Theory to seven focus groups and finds concrete drivers and blockers: 7 focus groups with 34 employees at a European university reveal that learning useful cyber skills, expectation that reports help build email filters, and peer norms increase reporting, while time cost, poor UX, privacy worries and lack of feedback cause people to stop reporting even if motivated. Participants propose gamification, mandatory onboarding training, regular feedback loops and UX fixes; EVT explains how experience reshapes perceived value.
AI-written summary · about
chapters (7)
- 0:00Phishing intervention study intro
- 1:53Phishing awareness campaign gaps
- 3:45Factors in phishing email reporting
- 6:36Motivating employee engagement
- 8:24Barriers to participation
- 9:47Employee improvement suggestions
- 10:54Study summary and implications
related talks
38mClick Here Now: A Positive Way to Create Phishing Awareness
27mBlunting the Phisher's Spear: A Risk-Based Approach...
53mRisk Profiles: Why Some Employees Attract Danger and Others Dodge It
44mDeveloping Cybersecurity - How do you make Staff Know Security
05mAn investigation of phishing awareness and education over time: When and how to best
05mKnowledge and Capabilities that Non-Expert Users Bring to Phishing Detection
54mEmployees Are the New Perimeter- How the Pandemic Shaped Workforce Risk
40mLeveraging Human Risk Data to Strengthen Cyber Resiliency