The nudge puzzle : matching nudge interventions to cybersecurity decisions

Tools

Zimmermann, Verena and Renaud, Karen (2021) The nudge puzzle : matching nudge interventions to cybersecurity decisions. ACM Transactions on Computer-Human Interaction, 28 (1). pp. 1-45. 7. ISSN 1073-0516 (https://doi.org/10.1145/3429888)

[thumbnail of Zimmermann-Renaud-ACM-TCHI-2021-The-nudge-puzzle-matching-nudge-interventions-to-cybersecurity]
Preview
 Text. Filename: Zimmermann_Renaud_ACM_TCHI_2021_The_nudge_puzzle_matching_nudge_interventions_to_cybersecurity.pdf
Accepted Author Manuscript
Download (4MB)| Preview

Abstract

Nudging is a promising approach, in terms of influencing people to make advisable choices in a range of domains, including cybersecurity. However, the processes underlying the concept and the nudge’s effectiveness in different contexts, and in the long term, are still poorly understood. Our research thus first reviewed the nudge concept and differentiated it from other interventions before applying it to the cybersecurity area. We then carried out an empirical study to assess the effectiveness of three different nudge-related interventions on four types of cybersecurity-specific decisions. Our study demonstrated that the combination of a simple nudge and information provision, termed a “hybrid nudge,” was at least as, and in some decision contexts even more effective in encouraging secure choices as the simple nudge on its own. This indicates that the inclusion of information when deploying a nudge, thereby increasing the intervention’s transparency, does not necessarily diminish its effectiveness. A follow-up study explored the educational and long-term impact of our tested nudge interventions to encourage secure choices. The results indicate that the impact of the initial nudges, of all kinds, did not endure. We conclude by discussing our findings and their implications for research and practice.

ORCID iDs

Zimmermann, Verena and Renaud, Karen ORCID logoORCID: https://orcid.org/0000-0002-7187-6531;
CORE (COnnecting REpositories)