Examining Factors Impacting the Effectiveness of Anti-Phishing Trainings. Issue 5 (3rd September 2022)

• Record Type: Journal Article
• Authors: Sumner, Alex; Yuan, Xiaohong; Anwar, Mohd; McBride, Maranda
• Is Part Of: Journal of computer information systems. Volume 62:Issue 5(2022)
• Page Start: 975
• Page End: 997
• Publication Date: 2022-09-03
• Subjects: Phishing -- personality traits -- phishing susceptibility -- social engineering -- anti-phishing training -- cybersecurity education and training; Electronic data processing -- Study and teaching -- Periodicals; 658.4038011
• DOI: 10.1080/08874417.2021.1955638
• Languages: English
• ISSNs: 0887-4417

Abstract

ABSTRACT: Approximately 65% of the organizations in the United States have fallen victim to a successful phishing attack. Many organizations offer anti-phishing training to their employees to defend against phishing attacks. The purpose of this study is to examine factors impacting the effectiveness of anti-phishing training and study the relationship between personality traits and phishing susceptibility. Participants filled out pre- and post-training surveys that included questions on identifying phishing and legitimate URLs and questions to determine DISC (Dominant, Influence, Steadiness, and Conscientiousness) personality traits. An analysis of the survey data shows that the participants' average accuracy in detecting phishing URLs increased 8% (t = 2.144, p -value = 0.0374) and their confidence in their answer choices increased 6% (t = 2.032, p -value = 0.0464) from pre-training to post-training surveys. Before and after training, participants with the Influence personality trait had the lowest susceptibility while both Dominant and Steadiness personalities had the highest susceptibility before and after training respectively.