Factors affecting organizational adoption and acceptance of computer-based security awareness training tools

• Published in: Information and computer security Vol. 29; no. 5; pp. 836 - 849
• Main Author: Dahabiyeh, Laila
• Format: Journal Article
• Language: English
• Published: Bingley Emerald Group Publishing Limited 12.11.2021
• Subjects: CAI; Computer assisted instruction; Content analysis; Costs; Cybercrime; Educational technology; Employees; Games; Network security; Security; Security management; Training
• ISSN: 2056-4961; 2056-497X
• DOI: 10.1108/ICS-12-2020-0200

PurposeAs insiders remain to be a main reason behind security breaches, effective information security awareness campaigns become critical in protecting organizations from security incidents. The purpose of this paper is to identify factors that influence organizational adoption and acceptance of computer-based security awareness training tools.Design/methodology/approachThe paper uses content analysis of online reviews of the top ten computer-based security awareness training tools that received Gartner peer insights Customers’ Choice 2019 award.FindingsThis study identifies nine critical adoption and success factors. These are synthesized into a conceptual framework based on the technology–organization–environment framework. The findings reveal that technological, organizational and environmental factors come into play in adoption decisions but with varying degrees of importance.Practical implicationsThis study highlights key factors that technology vendors should take into consideration when designing computer-based security awareness training tools to increase adoption rates.Originality/valueThis research offers a novel contribution to the literature on information security awareness delivery methods by identifying key factors that influence organizational adoption and acceptance of computer-based security awareness training tools. Those factors were identified using content analysis of online reviews, which is a new methodological approach to the information security awareness literature.