Loss aversion and fixed reward in gamified cybersecurity training

Nicole Carle; Jacques Ophoff; Lynsay Shepherd

doi:10.1007/978-3-031-94924-1_8

Loss aversion and fixed reward in gamified cybersecurity training

Nicole Carle, Jacques Ophoff^*, Lynsay Shepherd

^*Corresponding author for this work

Department of Cybersecurity and Computing

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Cyber threats continue to evolve yet research indicates that existing cyber security training programmes are often ineffective, leaving users feeling discouraged rather than empowered. As a result, there is a pressing need to redesign these programmes to enhance both engagement and learning outcomes. This study investigates the impact of two points-based gamification mechanisms, loss aversion (LA) and fixed reward (FR), on cyber security knowledge and user engagement. We developed two gamified web applications to implement LA or FR respectively, while incorporating identical core content alongside additional gamification elements, such as scenario-based learning and exploration. A total of 27 participants completed the training and evaluated the applications through an initial and end cyber security knowledge assessment, and a user engagement survey. Findings indicate that while LA was more effective in improving cyber security knowledge, FR received higher scores for user engagement. These results suggest that both LA and FR offer distinct advantages, with suitability depending on the specific training context.

Original language	English
Title of host publication	Information Security Education. Empowering People through Information Security Education
Subtitle of host publication	17th IFIP WG 11.8 World Conference, WISE 2025, Maribor, Slovenia, May 21–23, 2025, Proceedings
Editors	Lynette Drevin, Wai Sze Leung, Suné von Solms
Place of Publication	Cham
Publisher	Springer
Pages	109-123
Number of pages	15
ISBN (Electronic)	9783031949241
ISBN (Print)	9783031949234, 9783031949265
DOIs	https://doi.org/10.1007/978-3-031-94924-1_8
Publication status	Published - 26 Jul 2025
Event	17th World Conference on Information Security Education: Information Security Education - hotel City, Maribor, Slovenia Duration: 21 May 2025 → 23 May 2025 Conference number: 17th https://www.ifiptc11.org/wg118-wise

Publication series

Name	IFIP Advances in Information and Communication Technology
Publisher	Springer
Volume	742
ISSN (Print)	1868-4238
ISSN (Electronic)	1868-422X

Conference

Conference	17th World Conference on Information Security Education
Abbreviated title	WISE 2025
Country/Territory	Slovenia
City	Maribor
Period	21/05/25 → 23/05/25
Internet address	https://www.ifiptc11.org/wg118-wise

Keywords

Gamification
Cyber security
Training
SETA
Loss aversion
Fixed reward

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1007/978-3-031-94924-1_8

Embargoed Document

Ophoff_LossAversion_Accepted_2025
Accepted author manuscript, 2.1 MB
Embargo ends: 26/07/26

Cite this

Carle, N., Ophoff, J., & Shepherd, L. (2025). Loss aversion and fixed reward in gamified cybersecurity training. In L. Drevin, W. S. Leung, & S. von Solms (Eds.), Information Security Education. Empowering People through Information Security Education: 17th IFIP WG 11.8 World Conference, WISE 2025, Maribor, Slovenia, May 21–23, 2025, Proceedings (pp. 109-123). ( IFIP Advances in Information and Communication Technology; Vol. 742). Springer. https://doi.org/10.1007/978-3-031-94924-1_8

Carle, Nicole ; Ophoff, Jacques ; Shepherd, Lynsay. / Loss aversion and fixed reward in gamified cybersecurity training. Information Security Education. Empowering People through Information Security Education: 17th IFIP WG 11.8 World Conference, WISE 2025, Maribor, Slovenia, May 21–23, 2025, Proceedings. editor / Lynette Drevin ; Wai Sze Leung ; Suné von Solms. Cham : Springer, 2025. pp. 109-123 ( IFIP Advances in Information and Communication Technology).

@inproceedings{78eff4fecfc9404585c781a752fe97f9,

title = "Loss aversion and fixed reward in gamified cybersecurity training",

abstract = "Cyber threats continue to evolve yet research indicates that existing cyber security training programmes are often ineffective, leaving users feeling discouraged rather than empowered. As a result, there is a pressing need to redesign these programmes to enhance both engagement and learning outcomes. This study investigates the impact of two points-based gamification mechanisms, loss aversion (LA) and fixed reward (FR), on cyber security knowledge and user engagement. We developed two gamified web applications to implement LA or FR respectively, while incorporating identical core content alongside additional gamification elements, such as scenario-based learning and exploration. A total of 27 participants completed the training and evaluated the applications through an initial and end cyber security knowledge assessment, and a user engagement survey. Findings indicate that while LA was more effective in improving cyber security knowledge, FR received higher scores for user engagement. These results suggest that both LA and FR offer distinct advantages, with suitability depending on the specific training context.",

author = "Nicole Carle and Jacques Ophoff and Lynsay Shepherd",

note = "{\textcopyright} 2026 IFIP International Federation for Information Processing Data availability statement: Not present in the AM, VoR not available to check.; 17th World Conference on Information Security Education : Information Security Education, WISE 2025 ; Conference date: 21-05-2025 Through 23-05-2025",

year = "2025",

month = jul,

day = "26",

doi = "10.1007/978-3-031-94924-1\_8",

language = "English",

isbn = "9783031949234",

series = " IFIP Advances in Information and Communication Technology",

publisher = "Springer",

pages = "109--123",

editor = "Lynette Drevin and Leung, \{Wai Sze\} and \{von Solms\}, Sun{\'e}",

booktitle = "Information Security Education. Empowering People through Information Security Education",

url = "https://www.ifiptc11.org/wg118-wise",

}

Carle, N, Ophoff, J & Shepherd, L 2025, Loss aversion and fixed reward in gamified cybersecurity training. in L Drevin, WS Leung & S von Solms (eds), Information Security Education. Empowering People through Information Security Education: 17th IFIP WG 11.8 World Conference, WISE 2025, Maribor, Slovenia, May 21–23, 2025, Proceedings. IFIP Advances in Information and Communication Technology, vol. 742, Springer, Cham, pp. 109-123, 17th World Conference on Information Security Education, Maribor, Slovenia, 21/05/25. https://doi.org/10.1007/978-3-031-94924-1_8

Loss aversion and fixed reward in gamified cybersecurity training. / Carle, Nicole; Ophoff, Jacques ; Shepherd, Lynsay.
Information Security Education. Empowering People through Information Security Education: 17th IFIP WG 11.8 World Conference, WISE 2025, Maribor, Slovenia, May 21–23, 2025, Proceedings. ed. / Lynette Drevin; Wai Sze Leung; Suné von Solms. Cham: Springer, 2025. p. 109-123 ( IFIP Advances in Information and Communication Technology; Vol. 742).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Loss aversion and fixed reward in gamified cybersecurity training

AU - Carle, Nicole

AU - Ophoff, Jacques

AU - Shepherd, Lynsay

N1 - Conference code: 17th

PY - 2025/7/26

Y1 - 2025/7/26

N2 - Cyber threats continue to evolve yet research indicates that existing cyber security training programmes are often ineffective, leaving users feeling discouraged rather than empowered. As a result, there is a pressing need to redesign these programmes to enhance both engagement and learning outcomes. This study investigates the impact of two points-based gamification mechanisms, loss aversion (LA) and fixed reward (FR), on cyber security knowledge and user engagement. We developed two gamified web applications to implement LA or FR respectively, while incorporating identical core content alongside additional gamification elements, such as scenario-based learning and exploration. A total of 27 participants completed the training and evaluated the applications through an initial and end cyber security knowledge assessment, and a user engagement survey. Findings indicate that while LA was more effective in improving cyber security knowledge, FR received higher scores for user engagement. These results suggest that both LA and FR offer distinct advantages, with suitability depending on the specific training context.

AB - Cyber threats continue to evolve yet research indicates that existing cyber security training programmes are often ineffective, leaving users feeling discouraged rather than empowered. As a result, there is a pressing need to redesign these programmes to enhance both engagement and learning outcomes. This study investigates the impact of two points-based gamification mechanisms, loss aversion (LA) and fixed reward (FR), on cyber security knowledge and user engagement. We developed two gamified web applications to implement LA or FR respectively, while incorporating identical core content alongside additional gamification elements, such as scenario-based learning and exploration. A total of 27 participants completed the training and evaluated the applications through an initial and end cyber security knowledge assessment, and a user engagement survey. Findings indicate that while LA was more effective in improving cyber security knowledge, FR received higher scores for user engagement. These results suggest that both LA and FR offer distinct advantages, with suitability depending on the specific training context.

U2 - 10.1007/978-3-031-94924-1_8

DO - 10.1007/978-3-031-94924-1_8

M3 - Conference contribution

SN - 9783031949234

SN - 9783031949265

T3 - IFIP Advances in Information and Communication Technology

SP - 109

EP - 123

BT - Information Security Education. Empowering People through Information Security Education

A2 - Drevin, Lynette

A2 - Leung, Wai Sze

A2 - von Solms, Suné

PB - Springer

CY - Cham

T2 - 17th World Conference on Information Security Education

Y2 - 21 May 2025 through 23 May 2025

ER -

Carle N, Ophoff J , Shepherd L. Loss aversion and fixed reward in gamified cybersecurity training. In Drevin L, Leung WS, von Solms S, editors, Information Security Education. Empowering People through Information Security Education: 17th IFIP WG 11.8 World Conference, WISE 2025, Maribor, Slovenia, May 21–23, 2025, Proceedings. Cham: Springer. 2025. p. 109-123. ( IFIP Advances in Information and Communication Technology). Epub 2025 Jul 26. doi: 10.1007/978-3-031-94924-1_8

Loss aversion and fixed reward in gamified cybersecurity training

Abstract

Publication series

Conference

Keywords

UN SDGs

Access to Document

Embargoed Document

Fingerprint

Cite this