Users May be the Weakest Link, but Tell Them Nicely: The Effect of Minor Language Variations in Cybersecurity Communication

• In Event: CYBER SECURITY and SYSTEM RESILIENCY: Human Factors in Cyber Security

Abstract

Dominating information security (Isec) research is the idea that “humans are the weakest link.” Some practitioners have cautioned that such finger-pointing rhetoric is detrimental to cybersecurity objectives. Indeed, words are thought-molding tools. Surprisingly, no Isec study has examined the effect of verbiage variations on user perceptions. Based on marketing literature, we propose that even subtle wording alterations can influence user perceptions and behavioral intentions. Using two experiments conducted in Botswana and USA, we investigate the impact of closeness-implying (e.g., we) versus user-referencing (e.g., you, user) language on perceptions and compliance intentions with security advisory communications across individualistic and collectivist cultures.

Authors

• Oteng Ntsweng, National University of Singapore

• Shem Amalaya, KPMG, Ireland

• Alsius David, SUNY Oneonta

• MD RASEL AL Mamun, Old Dominion University

• Tshiamo Sigwele, Botswana International University Of Science And Technology

• Bonani Thela, Botswana International University Of Science And Technology