Personality Traits and Security Motivation.

Security awareness training has long been considered a critical element in organizational cybersecurity preparedness and a mandatory activity in many laws and regulations as well as cybersecurity management standards such as ISO 27001. Organizations approach the issue with different methods, but many rely on online training as a cost-effective way to reach a large number of employees at a low cost. When this training is delivered as a voluntary measure, it is essential to have knowledge about the factors contributing to motivation to participate. This study uses the theoretical concepts from Protection motivation theory (PMT) as well as looking into how individual personality traits might affect the willingness to participate. A survey was conducted in a large Norwegian municipality and the data analyzed with PLS-SEM. The study found support for the concepts of Cost and Effectiveness affecting Motivation, but not Vulnerability and Severity. The personality traits of Extroversion and Agreeableness was found to have some moderating effect.