Cyber Security in Hospitals: A Network-Oriented Model for Behavioural Learning of Employees During Phishing Simulations
摘要
This paper presents a multi-level adaptive network modelling approach to analyse and predict the behaviour of employees during phishing training simulations. The presented adaptive network model is based on elements of the COM-B framework for behavioural change which takes into account factors related to the capability, opportunity and motivation to determine employees reactions to phishing emails. In addition to this the cyber security risks within hospitals associated with phishing are highlighted. The study demonstrates that through feedback learning processes the behaviour of employees changes over time leading to more secure behaviour.