Information Security Fatigue Countermeasures Based on Cognitive Strategy Scale

Information security measures have become increasingly important not only for companies but also for individuals in recent years. For this reason, many information security measures have been taken. However, if information security is overly complicated, ICT users may get overwhelmed. Although research on security fatigue is being conducted, currently it is not enough. In particular, research from a psychological point of view is also needed. Examples of psychological measures include cognitive strategies that are classified as behavioral models. There are various cognitive strategies, but research into particular countermeasures against security fatigue has not been sufficiently explored. In this study, we propose new measures based on psychological viewpoints. These are security fatigue countermeasures that introduce a cognitive strategy. We conducted a questionnaire survey on cognitive strategies and security fatigue and then analyzed the results and classified them into 24 levels. We then proposed and evaluated new countermeasures against security fatigue on the basis of the analysis. The results demonstrate that it should be possible to plan appropriate information security measures in accordance with human behavior patterns.