Sweetening the medicine: educating users about information security by means of game play

  • Authors:
  • Thomas Monk;Johan van Niekerk;Rossouw von Solms

  • Affiliations:
  • Nelson Mandela Metropolitan University;Nelson Mandela Metropolitan University;Nelson Mandela Metropolitan University

  • Venue:
  • SAICSIT '10 Proceedings of the 2010 Annual Research Conference of the South African Institute of Computer Scientists and Information Technologists
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Employees of companies are often unable to work securely, because they lack knowledge in the field of Information Security. This paper is based on the premise that a computer game could be used to educate employees about Information Security. A game was developed with the aim of educating employees in this field of study. If people were motivated to play the game, without external motivation from an organisation, then these people would also be motivated to learn about information security. Therefore, a secondary aim of this game was to be self-motivating. An experiment was conducted in order to test whether or not these aims were met. The experiment was conducted on a play test group and a control group. The play test group played the game before completing a questionnaire, while the control group, simply, completed the questionnaire. This paper discusses the research design of the experiment and also provides an initial analysis of the results. The game design will be discussed which also provides guidelines for future game designers to follow.