{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,30]],"date-time":"2026-07-30T14:18:21Z","timestamp":1785421101850,"version":"3.56.0"},"publisher-location":"New York, NY, USA","reference-count":83,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Federal state of NRW, Germany","award":["SecHuman ? Security for Humans in Cyberspace"],"award-info":[{"award-number":["SecHuman ? Security for Humans in Cyberspace"]}]},{"name":"Deutsche Forschungsgemeinschaft (DFG, German Research Foundation)","award":["EXC 2092 CASA - 390781972"],"award-info":[{"award-number":["EXC 2092 CASA - 390781972"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3690196","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"2666-2680","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["Selling Satisfaction: A Qualitative Analysis of Cybersecurity Awareness Vendors' Promises"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5159-3868","authenticated-orcid":false,"given":"Jonas","family":"Hielscher","sequence":"first","affiliation":[{"name":"Chair for Human-Centred Security, Ruhr University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6804-3547","authenticated-orcid":false,"given":"Markus","family":"Sch\u00f6ps","sequence":"additional","affiliation":[{"name":"Chair for Human-Centred Security, Ruhr University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-8226-4385","authenticated-orcid":false,"given":"Jens","family":"Opdenbusch","sequence":"additional","affiliation":[{"name":"Chair for Human-Centred Security, Ruhr-University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-0769-4046","authenticated-orcid":false,"given":"Felix","family":"Reichmann","sequence":"additional","affiliation":[{"name":"Developer Centered Security, Ruhr University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1400-5825","authenticated-orcid":false,"given":"Marco","family":"Gutfleisch","sequence":"additional","affiliation":[{"name":"Chair for Human-Centred Security, Ruhr University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7129-9642","authenticated-orcid":false,"given":"Karola","family":"Marky","sequence":"additional","affiliation":[{"name":"Digital Sovereignty Lab, Ruhr University Bochum, Bochum, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6667-0440","authenticated-orcid":false,"given":"Simon","family":"Parkin","sequence":"additional","affiliation":[{"name":"TPM Cybersecurity Group, Delft University of Technology, Delft, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.5555\/2630611.2630615"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/322796.322806"},{"key":"e_1_3_2_1_3_1","volume-title":"Uncertainty in economics","author":"Akerlof George A","unstructured":"George A Akerlof. 1978. The market for 'lemons': Quality uncertainty and the market mechanism. In Uncertainty in economics. Elsevier, Oxford, 235--251."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833633"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICITST.2014.7038814"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2001.991552"},{"key":"e_1_3_2_1_7_1","volume-title":"The economics of information security. science","author":"Anderson Ross","year":"2006","unstructured":"Ross Anderson and Tyler Moore. 2006. The economics of information security. science, Vol. 314, 5799 (2006), 610--613."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2016.57"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.09.004"},{"key":"e_1_3_2_1_10_1","volume-title":"WISP 2012 Proceedings","volume":"2012","author":"Bauer Stefan","year":"2013","unstructured":"Stefan Bauer, Edward WN Bernroider, and Katharina Chudzikowski. 2013. End User Information Security Awareness Programs for Improving InformationSecurity in Banking Organizations: Preliminary Results from an Exploratory Study. In WISP 2012 Proceedings, Vol. 2012. AISeL, Amsterdam, 1--17."},{"key":"e_1_3_2_1_11_1","volume-title":"Productive Security: A Scalable Methodology for Analysing Employee Security Behaviours. In Twelfth Symposium on Usable Privacy and Security (SOUPS 2016","author":"Beautement Adam","year":"2016","unstructured":"Adam Beautement, Ingolf Becker, Simon Parkin, Kat Krol, and Angela Sasse. 2016. Productive Security: A Scalable Methodology for Analysing Employee Security Behaviours. In Twelfth Symposium on Usable Privacy and Security (SOUPS 2016). USENIX Association, Denver, CO, 253--270. https:\/\/www.usenix.org\/conference\/soups2016\/technical-sessions\/presentation\/beautement"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1595676.1595684"},{"key":"e_1_3_2_1_13_1","volume-title":"One size fits all? What counts as quality practice in (reflexive) thematic analysis? Qualitative research in psychology","author":"Braun Virginia","year":"2021","unstructured":"Virginia Braun and Victoria Clarke. 2021. One size fits all? What counts as quality practice in (reflexive) thematic analysis? Qualitative research in psychology, Vol. 18, 3 (2021), 328--352."},{"key":"e_1_3_2_1_14_1","volume-title":"You Need More Resources: The Hidden Costs of Introducing Simulated Phishing Campaigns. In 32nd USENIX Security Symposium (USENIX Security 23)","author":"Brunken Lina","unstructured":"Lina Brunken, Annalina Buckmann, Jonas Hielscher, and M. Angela Sasse. 2023. To Do This Properly, You Need More Resources: The Hidden Costs of Introducing Simulated Phishing Campaigns. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, Anaheim, CA, 4105--4122. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/brunken"},{"key":"e_1_3_2_1_15_1","volume-title":"Shari Lawrence Pfleeger","author":"Caputo Deanna D","year":"2013","unstructured":"Deanna D Caputo, Shari Lawrence Pfleeger, Jesse D Freeman, and M Eric Johnson. 2013. Going spear phishing: Exploring embedded training and awareness. IEEE security & privacy, Vol. 12, 1 (2013), 28--38."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2017.8258485"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec\/tyac006"},{"key":"e_1_3_2_1_18_1","volume-title":"Thematic analysis. Qualitative psychology: A practical guide to research methods","author":"Clarke Victoria","year":"2015","unstructured":"Victoria Clarke, Virginia Braun, and Nikki Hayfield. 2015. Thematic analysis. Qualitative psychology: A practical guide to research methods, Vol. 222, 2015 (2015), 248."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103408"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3555090"},{"key":"e_1_3_2_1_21_1","volume-title":"A framework and assessment instrument for information security culture. Computers & security","author":"Veiga Ad\u00e9le Da","year":"2010","unstructured":"Ad\u00e9le Da Veiga and Jan HP Eloff. 2010. A framework and assessment instrument for information security culture. Computers & security, Vol. 29, 2 (2010), 196--207."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.14722\/usec.2022.23080"},{"key":"e_1_3_2_1_23_1","volume-title":"The positive outcomes of information security awareness training in companies--A case study. information security technical report","author":"Eminaugaouglu Mete","year":"2009","unstructured":"Mete Eminaugaouglu, Erdem Uccar, and cSaban Eren. 2009. The positive outcomes of information security awareness training in companies--A case study. information security technical report, Vol. 14, 4 (2009), 223--229."},{"key":"e_1_3_2_1_24_1","unstructured":"European Commission. 2023. Directive on measures for a high common level of cybersecurity across the Union (NIS2 Directive)."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3610193"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.24251\/HICSS.2020.798"},{"key":"e_1_3_2_1_27_1","volume-title":"Economics of information security and privacy III. Springer","author":"Flor\u00eancio Dinei","unstructured":"Dinei Flor\u00eancio and Cormac Herley. 2013. Where do all the attacks go?. In Economics of information security and privacy III. Springer, Springer, Berlin, 13--33."},{"key":"e_1_3_2_1_28_1","volume-title":"Proceedings of the Seventeenth USENIX Conference on Usable Privacy and Security (SOUPS'21)","author":"Franz Anjuli","year":"2021","unstructured":"Anjuli Franz, Verena Zimmermann, Gregor Albrecht, Katrin Hartwig, Christian Reuter, Alexander Benlian, and Joachim Vogt. 2021. SoK: still plenty of phish in the sea?a taxonomy of user-oriented phishing interventions and avenues for future research. In Proceedings of the Seventeenth USENIX Conference on Usable Privacy and Security (SOUPS'21). USENIX Association, USA, Article 18, 19 pages."},{"key":"e_1_3_2_1_29_1","unstructured":"Gartner. 2023. Products In Security Awareness Computer-Based Training Market. https:\/\/www.gartner.com\/reviews\/market\/security-awareness-computer-based-training"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.56553\/popets-2022-0078"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3481357.3481512"},{"key":"e_1_3_2_1_32_1","volume-title":"Roback","author":"Guttman Barbara","year":"1995","unstructured":"Barbara Guttman and Edward A. Roback. 1995. An Introduction to Computer Security: the NIST Handbook. https:\/\/nvlpubs.nist.gov\/nistpubs\/legacy\/sp\/nistspecialpublication800--12.pdf"},{"key":"e_1_3_2_1_33_1","volume-title":"NIST Reports. NIST Interagency\/Internal Report (NISTIR)","author":"Haney Julie","unstructured":"Julie Haney, Jody Jacobs, Susanne Furman, and Fernando Barrientos. 2022. Approaches and challenges of federal cybersecurity awareness programs. In NIST Reports. NIST Interagency\/Internal Report (NISTIR), National Institute of Standards ?, Gaithersburg, 1--73."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","unstructured":"Julie Haney Jody Jacobs Susanne M Furman et al. 2022. Federal Cybersecurity Awareness Programs A Mixed Methods Research Study. In NISTIR 8420. NIST Gaithersburg 1--48. https:\/\/doi.org\/10.6028\/NIST.IR.8420","DOI":"10.6028\/NIST.IR.8420"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2016.2616285"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1719030.1719050"},{"key":"e_1_3_2_1_37_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Hielscher Jonas","unstructured":"Jonas Hielscher, Uta Menges, Simon Parkin, Annette Kluge, and M. Angela Sasse. 2023. textquotedblleftEmployees Who Dontextquoterightt Accept the Time Security Takes Are Not Aware Enoughtextquotedblright: The CISO View of Human-Centred Security. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, Anaheim, CA, 2311--2328. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/hielscher"},{"key":"e_1_3_2_1_38_1","volume-title":"33nd USENIX Security Symposium (USENIX Security 24)","author":"Hielscher Jonas","year":"2024","unstructured":"Jonas Hielscher and Simon Parkin. 2024. \"What Keeps People Secure is That They Met The Security Team\": Deconstructing the Incentive Structure of Organizational Security Awareness. In 33nd USENIX Security Symposium (USENIX Security 24). USENIX Association, Philadelphia, PA. https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/hielscher"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","unstructured":"Hielscher et al. 2023. Online Appendix. https:\/\/doi.org\/10.4121\/5e7d7ae2-c639--4bcc-8664-a4ad5526868e.","DOI":"10.4121\/5e7d7ae2-c639--4bcc-8664-a4ad5526868e"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103364"},{"key":"e_1_3_2_1_41_1","unstructured":"SANS Institute. 2021. 2021 SECURITY AWARENESS REPORT -- MANAGING HUMAN CYBER RISK. Technical Report. SANS Institute."},{"key":"e_1_3_2_1_42_1","unstructured":"SANS Institute. 2022. 2022 SECURITY AWARENESS REPORT -- MANAGING HUMAN CYBER RISK. Technical Report. SANS Institute."},{"key":"e_1_3_2_1_43_1","unstructured":"SANS Institute. 2023. 2023 SECURITY AWARENESS REPORT -- MANAGING HUMAN CYBER RISK. Technical Report. SANS Institute."},{"key":"e_1_3_2_1_44_1","volume-title":"Information Technology -- Security techniques -- Information Security Management -- Measurement. Standard ISO\/IEC TR 29110--1:2016","author":"Central Secretary ISO","unstructured":"ISO Central Secretary. 2016. Information Technology -- Security techniques -- Information Security Management -- Measurement. Standard ISO\/IEC TR 29110--1:2016. International Organization for Standardization, Geneva, CH."},{"key":"e_1_3_2_1_45_1","volume-title":"Standard ISO\/IEC TR 29110--1:2016","author":"Central Secretary ISO","unstructured":"ISO Central Secretary. 2022. ISO\/IEC 27001 Information technology -- Security techniques -- Information security management systems -- Requirements. Standard ISO\/IEC TR 29110--1:2016. International Organization for Standardization, Geneva, CH."},{"key":"e_1_3_2_1_46_1","volume-title":"Furman","author":"Jacobs Jody L.","year":"2023","unstructured":"Jody L. Jacobs, Julie M. Haney, and Susanne M. Furman. 2023. Measuring the Effectiveness of U.S. Government Security Awareness Programs: A Mixed-Methods Study. In HCI in Business, Government and Organizations,, Fiona Nah and Keng Siau (Eds.). Springer Nature Switzerland, Cham, 14--33."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1186\/s13673-020-00237-7"},{"key":"e_1_3_2_1_48_1","volume-title":"Security metrics: replacing fear, uncertainty, and doubt. Pearson Education","author":"Jaquith Andrew","unstructured":"Andrew Jaquith. 2007. Security metrics: replacing fear, uncertainty, and doubt. Pearson Education, London."},{"key":"e_1_3_2_1_49_1","volume-title":"Enhancing employees information security awareness in private and public organisations: A systematic literature review. Computers & security","author":"Khando Khando","year":"2021","unstructured":"Khando Khando, Shang Gao, Sirajul M Islam, and Ali Salman. 2021. Enhancing employees information security awareness in private and public organisations: A systematic literature review. Computers & security, Vol. 106 (2021), 102267."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623072"},{"key":"e_1_3_2_1_51_1","volume-title":"Qualitative inhaltsanalyse (German). Beltz Juventa","author":"Kuckartz Udo","unstructured":"Udo Kuckartz. 2012. Qualitative inhaltsanalyse (German). Beltz Juventa, Weinheim."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/1572532.1572536"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833766"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2013.192"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-03638-6_18"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2010.10.002"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1145\/1900546.1900553"},{"key":"e_1_3_2_1_58_1","volume-title":"Sam Donaldson, Steven Furnell, and David Crozier.","author":"Pedley Daniel","year":"2020","unstructured":"Daniel Pedley, Tania Borges, Alex Bollen, Jayesh Navin Shah, Sam Donaldson, Steven Furnell, and David Crozier. 2020. UK DCMSC: Cyber security skills in the UK labour market 2020."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3005714"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1515\/jhsem-2014-0035"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103585"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2018.05.003"},{"key":"e_1_3_2_1_63_1","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Ramesh Reethika","year":"2023","unstructured":"Reethika Ramesh, Anjali Vyas, and Roya Ensafi. 2023. \"All of them claim to be the best\": Multi-perspective study of VPN users and VPN providers. In 32nd USENIX Security Symposium (USENIX Security 23). USENIX Association, Anaheim, CA, 5773--5789. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/ramesh-vpn"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300663"},{"key":"e_1_3_2_1_65_1","volume-title":"Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020","author":"Reinheimer Benjamin","year":"2020","unstructured":"Benjamin Reinheimer, Lukas Aldag, Peter Mayer, Mattia Mossano, Reyhan Duezguen, Bettina Lofthouse, Tatiana von Landesberger, and Melanie Volkamer. 2020. An investigation of phishing awareness and education over time: When and how to best remind users. In Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020). USENIX Association, Berkely, 259--284. https:\/\/www.usenix.org\/conference\/soups2020\/presentation\/reinheimer"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-07620-1_32"},{"key":"e_1_3_2_1_67_1","volume-title":"Cyber Threat Intelligence: The No-Nonsense Guide for CISOs and Security Managers","author":"Roberts Aaron","unstructured":"Aaron Roberts. 2021. The Cybersecurity Wild West. In Cyber Threat Intelligence: The No-Nonsense Guide for CISOs and Security Managers. Springer, Berlin, 1--16."},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISTMET.2014.6936509"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1011902718709"},{"key":"e_1_3_2_1_70_1","volume-title":"Secrets and lies: Digital security in a networked world","author":"Schneier Bruce","unstructured":"Bruce Schneier. 2004. Secrets and lies: Digital security in a networked world. Wiley, Indianapolis, Ind."},{"key":"e_1_3_2_1_71_1","unstructured":"Andreas E Sch\u00fctz. 2018. Information security awareness: it's time to change minds."},{"key":"e_1_3_2_1_72_1","first-page":"85","article-title":"Information asymmetry meets data security: The lemons market for smartphone apps","volume":"26","author":"Smith Margaret W","year":"2019","unstructured":"Margaret W Smith. 2019. Information asymmetry meets data security: The lemons market for smartphone apps. Pol'y Persp., Vol. 26 (2019), 85.","journal-title":"Pol'y Persp."},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3207272"},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1080\/10919392.2022.2068906"},{"key":"e_1_3_2_1_75_1","unstructured":"U.S. Department of Homeland Security. 2012. The Menlo Report: Ethical Principles Guiding Information and Communication Technology Research."},{"key":"e_1_3_2_1_76_1","volume-title":"Verified Market Research","author":"VMR","year":"2023","unstructured":"VMR: Verified Market Research. 2023. Global Security Awareness Training Software Market Size. https:\/\/www.verifiedmarketresearch.com\/product\/security-awareness-training-software-market\/"},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-66504-3_19"},{"key":"e_1_3_2_1_78_1","volume-title":"Proceedings of the 8th Conference on USENIX Security Symposium -","volume":"8","author":"Whitten Alma","unstructured":"Alma Whitten and J. D. Tygar. 1999. Why Johnny can't encrypt: a usability evaluation of PGP 5.0. In Proceedings of the 8th Conference on USENIX Security Symposium - Volume 8 (Washington, D.C.) (SSYM'99). USENIX Association, USA, 14."},{"key":"e_1_3_2_1_79_1","doi-asserted-by":"crossref","unstructured":"Mark Wilson and Joan Hash. 2003. Building an Information Technology Security Awareness and Training Program. https:\/\/nvlpubs.nist.gov\/nistpubs\/legacy\/sp\/nistspecialpublication800--50.pdf","DOI":"10.6028\/NIST.SP.800-50"},{"key":"e_1_3_2_1_80_1","doi-asserted-by":"crossref","unstructured":"Mark Wilson Joan Hash et al. 2003. Building an information technology security awareness and training program. NIST Special publication Vol. 800 50 (2003) 1--39.","DOI":"10.6028\/NIST.SP.800-50"},{"key":"e_1_3_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1108\/IMDS-08-2020-0462"},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijhcs.2019.05.005"},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.1145\/3429888"}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690196","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3690196","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T05:53:13Z","timestamp":1755841993000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690196"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":83,"alternative-id":["10.1145\/3658644.3690196","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3690196","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}