{"id":"https://openalex.org/W4399759685","doi":"https://doi.org/10.1093/cybsec/tyae010","title":"Who will take the bait? Using an embedded, experimental study to chart organization-specific phishing risk profiles and the effect of a voluntary microlearning among employees of a Dutch municipality","display_name":"Who will take the bait? Using an embedded, experimental study to chart organization-specific phishing risk profiles and the effect of a voluntary microlearning among employees of a Dutch municipality","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4399759685","doi":"https://doi.org/10.1093/cybsec/tyae010"},"language":"en","primary_location":{"id":"doi:10.1093/cybsec/tyae010","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyae010","pdf_url":null,"source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1093/cybsec/tyae010","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060524931","display_name":"Remco Spithoven","orcid":"https://orcid.org/0000-0002-6271-0855"},"institutions":[{"id":"https://openalex.org/I2801398864","display_name":"Saxion","ror":"https://ror.org/005t9n460","country_code":"NL","type":"education","lineage":["https://openalex.org/I2801398864"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Remco Spithoven","raw_affiliation_strings":["Head of Research Group of Public Security at School of Governance, Law & Urban Development, Saxion University of Applied Sciences , Wapenrustlaan 11, 7321 DL Apeldoorn ,","Head of Research Group of Public Security at School of Governance, Law & Urban Development, Saxion University of Applied Sciences , Wapenrustlaan 11, 7321 DL Apeldoorn , the Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-6271-0855","affiliations":[{"raw_affiliation_string":"Head of Research Group of Public Security at School of Governance, Law & Urban Development, Saxion University of Applied Sciences , Wapenrustlaan 11, 7321 DL Apeldoorn ,","institution_ids":["https://openalex.org/I2801398864"]},{"raw_affiliation_string":"Head of Research Group of Public Security at School of Governance, Law & Urban Development, Saxion University of Applied Sciences , Wapenrustlaan 11, 7321 DL Apeldoorn , the Netherlands","institution_ids":["https://openalex.org/I2801398864"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044496332","display_name":"Anthonie Drenth","orcid":null},"institutions":[{"id":"https://openalex.org/I4210145896","display_name":"Ministry of Security and Justice","ror":"https://ror.org/04nzhmg91","country_code":"NL","type":"government","lineage":["https://openalex.org/I4210140876","https://openalex.org/I4210145896"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Anthonie Drenth","raw_affiliation_strings":["Cyber Security Advisor at the National Cyber Security Centre (NCSC), Ministry of Justice and Security , Turfmarkt 147, 2511 DP The Hague ,","Cyber Security Advisor at the National Cyber Security Centre (NCSC), Ministry of Justice and Security , Turfmarkt 147, 2511 DP The Hague , the Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Advisor at the National Cyber Security Centre (NCSC), Ministry of Justice and Security , Turfmarkt 147, 2511 DP The Hague ,","institution_ids":["https://openalex.org/I4210145896"]},{"raw_affiliation_string":"Cyber Security Advisor at the National Cyber Security Centre (NCSC), Ministry of Justice and Security , Turfmarkt 147, 2511 DP The Hague , the Netherlands","institution_ids":["https://openalex.org/I4210145896"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5060524931"],"corresponding_institution_ids":["https://openalex.org/I2801398864"],"apc_list":{"value":1864,"currency":"USD","value_usd":1864},"apc_paid":{"value":1864,"currency":"USD","value_usd":1864},"fwci":2.984,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.92276757,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"10","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10664","display_name":"Sentiment Analysis and Opinion Mining","score":0.9758999943733215,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.7212123870849609},{"id":"https://openalex.org/keywords/chart","display_name":"Chart","score":0.5223604440689087},{"id":"https://openalex.org/keywords/turnover","display_name":"Turnover","score":0.5094934105873108},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.437175989151001},{"id":"https://openalex.org/keywords/organizational-chart","display_name":"Organizational chart","score":0.41702941060066223},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.41336244344711304},{"id":"https://openalex.org/keywords/applied-psychology","display_name":"Applied psychology","score":0.32095783948898315},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.20020180940628052},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.17127007246017456},{"id":"https://openalex.org/keywords/management","display_name":"Management","score":0.1482233703136444},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.12308835983276367},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.10374584794044495},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.08867213129997253}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.7212123870849609},{"id":"https://openalex.org/C190812933","wikidata":"https://www.wikidata.org/wiki/Q28923","display_name":"Chart","level":2,"score":0.5223604440689087},{"id":"https://openalex.org/C26077564","wikidata":"https://www.wikidata.org/wiki/Q1910318","display_name":"Turnover","level":2,"score":0.5094934105873108},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.437175989151001},{"id":"https://openalex.org/C159319019","wikidata":"https://www.wikidata.org/wiki/Q852602","display_name":"Organizational chart","level":2,"score":0.41702941060066223},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.41336244344711304},{"id":"https://openalex.org/C75630572","wikidata":"https://www.wikidata.org/wiki/Q538904","display_name":"Applied psychology","level":1,"score":0.32095783948898315},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.20020180940628052},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.17127007246017456},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.1482233703136444},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.12308835983276367},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10374584794044495},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.08867213129997253},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/cybsec/tyae010","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyae010","pdf_url":null,"source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1093/cybsec/tyae010","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyae010","pdf_url":null,"source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.550000011920929}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":58,"referenced_works":["https://openalex.org/W354740698","https://openalex.org/W1165538689","https://openalex.org/W1561778784","https://openalex.org/W1867435648","https://openalex.org/W1974961651","https://openalex.org/W2012879543","https://openalex.org/W2026031776","https://openalex.org/W2047074192","https://openalex.org/W2052176706","https://openalex.org/W2069578835","https://openalex.org/W2085463891","https://openalex.org/W2136136174","https://openalex.org/W2142287040","https://openalex.org/W2153518124","https://openalex.org/W2162532690","https://openalex.org/W2164346415","https://openalex.org/W2530015035","https://openalex.org/W2552296983","https://openalex.org/W2585421820","https://openalex.org/W2607272090","https://openalex.org/W2725324204","https://openalex.org/W2736747074","https://openalex.org/W2748178716","https://openalex.org/W2762332720","https://openalex.org/W2809969921","https://openalex.org/W2898538513","https://openalex.org/W2917036558","https://openalex.org/W2945437145","https://openalex.org/W2966985053","https://openalex.org/W2974183889","https://openalex.org/W2995810494","https://openalex.org/W3007005642","https://openalex.org/W3007676319","https://openalex.org/W3010992235","https://openalex.org/W3013680050","https://openalex.org/W3045765962","https://openalex.org/W3047864016","https://openalex.org/W3123603407","https://openalex.org/W3127833313","https://openalex.org/W3174252120","https://openalex.org/W3207470445","https://openalex.org/W4200040039","https://openalex.org/W4237513721","https://openalex.org/W4251323996","https://openalex.org/W4281975254","https://openalex.org/W4285049582","https://openalex.org/W6663460579","https://openalex.org/W6667741409","https://openalex.org/W6687610758","https://openalex.org/W6693372776","https://openalex.org/W6716463632","https://openalex.org/W6719171758","https://openalex.org/W6728234582","https://openalex.org/W6742570696","https://openalex.org/W6791828553","https://openalex.org/W6797367044","https://openalex.org/W6799539189","https://openalex.org/W6803740330"],"related_works":["https://openalex.org/W2179868099","https://openalex.org/W1588287328","https://openalex.org/W4253021459","https://openalex.org/W2366678299","https://openalex.org/W4213093564","https://openalex.org/W2356782818","https://openalex.org/W3010921054","https://openalex.org/W2145267708","https://openalex.org/W4234837685","https://openalex.org/W3141570629"],"abstract_inverted_index":{"Abstract":[0],"Phishing":[1],"can":[2,40,68,76,237],"lead":[3],"to":[4,51,78,93,152,182,190,217,245],"data":[5],"leaks":[6],"or":[7],"infiltration":[8],"of":[9,16,32,57,64,82,97,99,115,125,137,140,177,193,206,214,226,263],"computer":[10],"networks.":[11],"Protection":[12],"against":[13,222],"the":[14,55,58,62,80,94,100,113,123,134,163,186,191,196,204,261,264],"risks":[15,81,114,192],"phishing":[17,47,89,116,141,223],"is":[18,161],"particularly":[19],"important":[20],"for":[21,122,165],"public":[22,66,227],"organizations":[23,67,231],"such":[24],"as":[25],"municipalities,":[26,229],"that":[27],"process":[28],"a":[29,48,211],"large":[30],"amount":[31],"sensitive":[33],"personal":[34],"information":[35],"and":[36,54,60,72,129,185,220,230,252,258],"whose":[37],"operational":[38,52],"processes":[39],"have":[41,200],"major":[42],"societal":[43],"impact.":[44],"This":[45,160],"makes":[46],"direct":[49],"threat":[50],"continuity":[53],"reputation":[56],"organization":[59,181],"raises":[61],"question":[63],"how":[65,249],"combat":[69],"this":[70,85,126,143,180,241],"effectively":[71],"which":[73],"resources":[74],"they":[75,147],"deploy":[77],"mitigate":[79],"phishing.":[83,159,194],"In":[84],"experiment,":[86,109],"two":[87],"test":[88],"emails":[90],"were":[91],"sent":[92],"total":[95],"population":[96],"one":[98],"15":[101],"largest":[102],"Dutch":[103],"municipalities.":[104],"We":[105,209,243],"performed":[106],"an":[107,154,201],"embedded":[108],"with":[110,119,254],"employees":[111,131,178,225],"experiencing":[112],"first":[117],"hand":[118],"extensive":[120],"attention":[121],"ethics":[124],"approach.":[127],"Senior":[128],"middle-aged":[130],"clearly":[132],"run":[133],"biggest":[135],"risk":[136],"becoming":[138],"victims":[139],"at":[142,174,248],"specific":[144],"organization,":[145,187],"but":[146],"are":[148],"not":[149,199],"automatically":[150],"prepared":[151],"do":[153],"online,":[155],"educational":[156],"microlearning":[157,197],"on":[158,203],"also":[162,246],"case":[164],"young":[166],"staff.":[167],"Less":[168],"voluntary":[169],"education":[170],"should":[171],"be":[172,238],"aimed":[173],"these":[175],"groups":[176],"in":[179,232,240],"make":[183],"them":[184],"more":[188],"resilient":[189],"Also,":[195],"did":[198],"effect":[202],"results":[205],"our":[207],"participants.":[208],"advocate":[210],"tailor-made":[212],"approach":[213],"offline":[215],"training":[216],"raise":[218],"awareness":[219],"resilience":[221],"among":[224],"organizations,":[228],"general.":[233],"Our":[234],"experimental":[235],"design":[236],"reused":[239],"direction.":[242],"conclude":[244],"look":[247],"never-clickers":[250],"think":[251],"act,":[253],"further":[255],"theoretical":[256],"substantiation":[257],"research":[259],"into":[260],"application":[262],"human-as-solution":[265],"approach..":[266]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2025-12-23T23:11:35.936235","created_date":"2025-10-10T00:00:00"}