On the design of playful training material for information security awareness

• This paper presents the rationale for the design of a card deck game sustaining information security training. The efforts have followed design thinking, been inspired by an approach for problem-based learning, and used gamification. The card deck game primarily aims to support entrepreneurs in small and medium-sized manufacturing companies, heading towards the introduction of digital services, yet is also useful for anyone to practice risk awareness. Information security, here in short representing the efforts to protect information and mitigate risks to uphold confidentiality, integrity and availability, is by SMEs often seen as a technical problem, but is depending on human behaviour. Literature on security training, emphasises the relevance of interpersonal dialogues and reflection, such reflection is not supported by traditional education, as for instance reading theory and answering questions. The application of gamification has shown to increase awareness, where the play becomes an eye-opener to progress focused dialogues and learning.

Ämnesord

NATURVETENSKAP  -- Data- och informationsvetenskap -- Systemvetenskap, informationssystem och informatik (hsv//swe)

NATURAL SCIENCES  -- Computer and Information Sciences -- Information Systems (hsv//eng)

Nyckelord

Serious play

Gamification

Design thinking

Educational games

Digital service innovation

Information systems

Informationssystem

Centrumbildning - Centrum för säkerhet i samhälle och kritiska infrastrukturer (CISS)

Centre - Centre for Critical Infrastructure and Societal Security (CISS)

Publikations- och innehållstyp

ref (ämneskategori)

kon (ämneskategori)