小组讨论与角色扮演培训对自我效能感、寻求支持及报告钓鱼邮件的影响:来自混合设计实验的证据
The Effects of Group Discussion and Role-playing Training on Self-efficacy, Support-seeking, and Reporting Phishing Emails: Evidence from a Mixed-design Experiment
AI总结:
本研究通过混合设计实验(N=105)发现,小组讨论和角色扮演培训能提升员工反钓鱼自我效能感与警惕性,且角色扮演培训在提高寻求支持意愿上显著优于对照组,为组织改进钓鱼干预措施提供了实证依据。
摘要:
组织依赖钓鱼干预措施来提升员工对绕过技术解决方案的钓鱼邮件的警惕性和安全响应。尽管有各种资源可用于对抗钓鱼,研究强调需要互动和实用的培训方法。为调查这种方法的有效性,我们在一所欧洲大学开发并开展了两项反钓鱼培训:小组讨论和角色扮演。我们进行了一项预注册实验(N = 105),包含三个时间点的重复测量、一个对照组和三次实地钓鱼测试。在组内分析中,两项培训均提升了员工的反钓鱼自我效能感和寻求支持的意愿。与对照组相比,仅角色扮演培训显著提高了寻求支持的意愿。与对照组相比,参与两项培训的参与者报告了更多的钓鱼测试,并对钓鱼攻击表现出更高的警惕性。我们讨论了评估和改进钓鱼干预措施以及促进组织内对钓鱼威胁的安全响应的实际意义。
英文摘要:
Organizations rely on phishing interventions to enhance employees' vigilance and safe responses to phishing emails that bypass technical solutions. While various resources are available to counteract phishing, studies emphasize the need for interactive and practical training approaches. To investigate the effectiveness of such an approach, we developed and delivered two anti-phishing trainings, group discussion and role-playing, at a European university. We conducted a pre-registered experiment (N = 105), incorporating repeated measures at three time points, a control group, and three in-situ phishing tests. Both trainings enhanced employees' anti-phishing self-efficacy and support-seeking intention in within-group analyses. Only the role-playing training significantly improved support-seeking intention when compared to the control group. Participants in both trainings reported more phishing tests and demonstrated heightened vigilance to phishing attacks compared to the control group. We discuss practical implications for evaluating and improving phishing interventions and promoting safe responses to phishing threats within organizations.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。