Cybersecurity Crafting Intervention Model Based on Behaviors Change Wheel

For a company to effectively protect its information assets, cybersecurity must be effective. While most firms make large investments in cybersecurity programs, most employees only comply with security policy in a passive manner. This trend might be a sign that many existing cybersecurity programs are not working as well as they could. The authors contend that because existing cybersecurity programs lack a theoretical foundation, these programs are not optimal to encourage employees initiatively change their behaviors to comply with security policy. This study advances the definition of cybersecurity crafting and uses expertise in the field of job crafting (JC) to provide an intervention that will influence initiative behaviors. To create a theory-informed cybersecurity development process, this study employs a cybersecurity crafting (CC) intervention strategy based on the Behavior Change Wheel (BCW) paradigm. The proposed cybersecurity crafting intervention process provides a sound basis for future empirical work including focus groups and action research.