Massive Dynamic Sweden

Enhancing Information Security Awareness Programs Through Collaborative Learning

This paper presents a design science study aimed at improving the efficiency of information security awareness (ISA) training in higher education, targeting teachers and students.

• The study addresses ineffective information security awareness training in higher education, motivated by the rise of human-targeted attacks such as phishing, and proposes gamification to boost engagement and motivation.
• Two artefacts were designed: an interactive online book built on Moodle and H5P covering six security categories (backup, remote access, data security, password management, social engineering, and software attacks), and a printed multiplayer board game with graded questions, personality and hacker cards, and duels.
• The only empirical result is a small two-group comparison in which the game group (interactive book plus board game) showed better knowledge retention than the textbook group, as measured by pre- and post-quizzes, though the authors acknowledge a broader sample is needed.