Overcoming resistance to cybersecurity awareness training: A test of narrative, humor, and fear appeals

Morrow, Ethan

Permalink

https://hdl.handle.net/2142/129845 Copy

Description

Title

Overcoming resistance to cybersecurity awareness training: A test of narrative, humor, and fear appeals

Author(s)

Morrow, Ethan

Issue Date

2025-07-08

Director of Research (if dissertation) or Advisor (if thesis)

Quick, Brian L

Doctoral Committee Chair(s)

Quick, Brian L

Committee Member(s)

• Bigsby, Elisabeth
• Dixon, Travis L
• Barley, William C

Department of Study

Communication

Discipline

Communication

Degree Granting Institution

University of Illinois Urbana-Champaign

Degree Name

Ph.D.

Degree Level

Dissertation

Keyword(s)

• Entertainment
• Narrative
• Humor
• Fear
• Persuasion
• Resistance
• Cybersecurity
• Awareness Training
• Risk Communication

Abstract

Cyberattacks present a major threat to both individuals and organizations. One institution that is particularly susceptible is higher education, due to its high turnover of students and open culture. Although many attacks can be stopped by software or firewalls, some rely on human fallibilities to obtain information or access to a system. To reduce the potential impact of human error, many organizations require users to undergo cybersecurity awareness training. However, these trainings are often viewed as scary, confusing, or boring, which limits their potential effectiveness. In this dissertation, I explore the potential for narratives and emotional appeals (fear, incongruent humor, superiority humor) to overcome resistance to these interventions, drawing from several communication theories. I collect a final sample of 677 undergraduate students from a large Midwestern university for this experiment. The results support the use of a narrative message structure, relative to a non-narrative structure, due to its ability to increase transportation into the messages and, indirectly, increase risk and efficacy perceptions. This investigation also finds that threatening narratives may lead to greater persuasion than humorous narratives in the short term, especially for character-related persuasive mechanisms. I discuss the theoretical implications of these findings, including calls for further investigation into the role of character efficacy and the relationship between message length and freedom threat perceptions. Furthermore, I consider the practical implications for cybersecurity awareness and—more broadly—risk interventions, with a focus on use cases for positive emotional appeals, such as humor.

Graduation Semester

2025-08

Type of Resource

Thesis

Handle URL

https://hdl.handle.net/2142/129845

Copyright and License Information

Copyright 2025 Ethan Morrow

Owning Collections