RAISING INFORMATION SECURITY AWARENESS USING DIGITAL SERIOUS GAMES WITH EMOTIONAL DESIGN

Abstract

Research studies repeatedly show that, worldwide, violations of security guidelines and data protection regulations often result from unconscious behavior and/or active (flawed) decisions made by individuals. The training and education of users to promote awareness of information security (InfoSec) and appropriate behavior should be one critical and very important component of an organization’s security strategy. How can digital serious games make a lasting contribution to raising awareness of InfoSec? In this paper, we present the development and story concept of digital serious games that are guided by emotional design principles such as personalization and storytelling and by the immersive learning approach. The results of user tests reveal that the developed digital serious games are positively accepted by a wide range of employees, moderately support their daily work, and are able to enhance and intensify InfoSec-related knowledge. In particular, women and people under the age of 35 perceive the most benefit from these digital serious games.