Falling and failing (to learn): Evidence from a nation-wide cybersecurity field experiment with SMEs

David Gonzalez-Jimenez, Francesco Capozza, Thomas Dirkmaat, Evelien van de Veer, Amber van Druten and Aurélien Baillon ()
Additional contact information
David Gonzalez-Jimenez: Erasmus University Rotterdam
Francesco Capozza: WZB - Wissenschaftszentrum Berlin für Sozialforschung
Aurélien Baillon: EM - EMLyon Business School

Post-Print from HAL

Abstract: Prior experiences are crucial in shaping risk prevention behavior. Previous studies have shown that experiencing a simulated phishing attack (a "phishing drill") reduces the likelihood of clicking on unsafe links and disclosing one's password. In a large field experiment involving 670 small and medium-sized enterprises (SMEs) and their 33,000 employees, we examined the impact of experience on individuals' ability to detect cyber-security threats, and whether this effect persisted over several months. We collected data at both the company and individual levels, including risk preference, time preference, and trust. Our findings indicate only a non-systematic, short-term effect of previous phishing emails on clicking behavior. A cluster of individuals with greater patience, trust, and risk seeking was more likely to click on phishing links in the first place but then also more likely to benefit from phishing drills.

Keywords: Field experiment; Replication; Phishing drill; Prevention; Patience; Risk attitude (search for similar items in EconPapers)
Date: 2025-02-01
New Economics Papers: this item is included in nep-cbe, nep-exp and nep-sbm
Note: View the original document on HAL open archive server: https://hal.science/hal-04875787v1
References: View references in EconPapers View complete reference list from CitEc
Citations:

Published in Journal of Economic Behavior and Organization, 2025, 230, 23 p. ⟨10.1016/j.jebo.2024.106868⟩

Downloads: (external link)
https://hal.science/hal-04875787v1/document (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:hal:journl:hal-04875787

DOI: 10.1016/j.jebo.2024.106868

Access Statistics for this paper

More papers in Post-Print from HAL
Bibliographic data for series maintained by CCSD ().