Moving from employee compliance to employee success in the cyber security domain

Renaud, Karen and Flowerday, Stephen and Dupuis, Marc (2021) Moving from employee compliance to employee success in the cyber security domain. Computer Fraud & Security, 2021 (4). pp. 16-19. (https://doi.org/10.1016/S1361-3723(21)00043-9)

[thumbnail of Renaud-etal-2021-CFAS-Moving-from-employee-compliance-to-employee-success-in-the-cyber-security-domain]
Preview
Text. Filename: Renaud_etal_2021_CFAS_Moving_from_employee_compliance_to_employee_success_in_the_cyber_security_domain.pdf
Accepted Author Manuscript
License: Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 logo

Download (387kB)| Preview

Abstract

Organisations frequently use fear as a tool to bring employees in line with cyber security policies, assuming that it’s an effective way to assure compliance. But many people respond negatively and this approach can have the opposite effect to the one intended. Karen Renaud, Stephen Flowerday and Marc Dupuis look at how turning cyber security education into a game makes it more readily embraced by staff and can have deeper, longerlasting results.