Phish Derby: Shoring the Human Shield Through Gamified Phishing Attacks

To better understand employees’ reporting behaviors in relation to phishing emails, we gamified the phishing security awareness training process by creating and conducting a month-long “Phish Derby” competition at a large university in the U.S. The university’s Information Security Office challenged employees to prove they could detect phishing emails as part of the simulated phishing program currently in place. Employees volunteered to compete for prizes during this special event and were instructed to report suspicious emails as potential phishing attacks. Prior to the beginning of the competition, we collected demographics and data related to the concepts central to two theoretical foundations: the Big Five personality traits and goal orientation theory. We found several notable relationships between demographic variables and Phish Derby performance, which was operationalized from the number of phishing attacks reported and employee report speed. Several key findings emerged, including past performance on simulated phishing campaigns positively predicted Phish Derby performance; older participants performed better than their younger colleagues, but more educated participants performed poorer; and individuals who used a mix of PCs and Macs at work performed worse than those using a single platform. We also found that two of the Big Five personality dimensions, extraversion and agreeableness, were both associated with poorer performance in phishing detection and reporting. Likewise, individuals who were driven to perform well in the Phish Derby because they desired to learn from the experience (i.e., learning goal orientation) performed at a lower level than those driven by other goals. Interestingly, self-reported levels of computer skill and the perceived ability to detect phishing messages failed to exhibit a significant relationship with Phish Derby performance. We discuss these findings and describe how focusing on motivating the good in employee cyber behaviors is a necessary yet too often overlooked component in organizations whose training cyber cultures are rooted in employee click rates alone.

Fraud Reporting within an Organization and the Use of the Internal Audit Function as a Training Ground for Management

This study examines the effects of using the internal audit function as a management training ground (MTG) and fraud magnitude on internal fraud reporting decisions. Two experiments examine (1) internal auditors’ reporting behaviors, and (2) other employees’ willingness to report directly to internal audit. In the first experiment, experienced internal auditors indicate that the use of internal audit as a MTG may negatively impact fraud reporting likelihood by internal auditors to the Chief Audit Executive (CAE). Further, using the internal audit function as a MTG inhibits the sense of urgency internal auditors feel to report large fraudulent acts. The second experiment compares management accountants’ preferences for reporting to an anonymous third-party hotline versus reporting directly to internal audit. The results indicate a preference for the hotline that increases with a MTG. This preference is fully mediated by the perceived trustworthiness of internal audit, which is negatively impacted by a MTG.

Access to Care, Reporting Behaviors, and Quality of Athletic Training Service Interactions for Reserve Officers' Training Corps cadets

Purpose: Reserve Officers’ Training Corps (ROTC) programs prepare student-civilians to become leaders through strenuous physical and leadership training. Unlike their student-athlete counterparts who have direct access to athletic training services, ROTC cadets may or may not have a healthcare provider available. The purpose of this study was to examine the access to care and reporting behaviors of ROTC cadets with a secondary aim exploring the quality of healthcare service interactions relative to patient-centered care. Methods: An online survey assessed access to care using a self-report tool on the type of medical providers available to the ROTC cadets (n=132, age=20±3 y) dispersed between the Army, Navy, Air Force, and Marines, and their illness/injury history and reporting behaviors. The participants who sought care for an injury/illness also completed the Consultation and Relational Empathy tool to measure the level of patient-centered care by the healthcare provider with follow-up analysis using the Consultation Care Measure tool for all athletic training service interactions. Data were analyzed using descriptive statistics. Results: ROTC cadets reported access to 2±1 healthcare providers including a designated civilian physician (26.5%), athletic trainer (23.5%), and ROTC peer first responder (14.4%). However, 50.8% of respondents stated they were unsure what healthcare providers were available. In total, 22.7% of cadets reported being injured and 26.5% reported being sick/ill while participating in ROTC activities. Of those who stated they had sustained an injury during ROTC, 59.9% seldomly or never reported their injury. The ROTC cadets who sought healthcare expressed they were satisfied with their injury (35.96±10.60) and illness (35.48±13.10) treatment from a patient-centered viewpoint. Conclusions: The ROTC cadets reported a general unfamiliarity with the healthcare providers available to them. Despite the reporting behaviors, the cadets reported being satisfied with the care they received.

The Impact of a Legally Defined Just Culture on Voluntary Reporting of Safety Information

The aim of the present study was to examine commercial pilots’ reporting behavior and confidence in their airlines’ just culture. In pursuit of this aim, 539 European-based pilots participated in the study by answering an online questionnaire. The results are compared with an earlier study comprising Australian-based pilots. The results reveal that 84% and 57% of the European and Australian pilots, respectively, trust their airlines’ just culture. When comparing reporting behaviors, it was found that 53% of the Australian pilots and 33% of the European pilots stated they had failed to report, or had under-reported, safety information in their airlines’ safety management system. A distinct difference with the aviation regulatory backdrop that the two pilot groups operate within is the legal legitimization of just culture in European law. It is unknown whether this difference influences confidence in just culture or has an effect on reporting behavior.

Do Impulsivity and Education Moderate the Effectiveness of Police Sexual Assault Investigations Training? Findings From a Solomon Four-Group Quasi-Experiment

Few studies have evaluated the effectiveness of sexual assault investigations training using experimental designs. Existing studies have not examined the impact of officers’ levels of impulsivity and education on training effectiveness. Using a Solomon four-group quasi-experimental design to assess pretesting effects, we examined the impact of training, impulsivity, and education on officers’ ( N = 432) adherence to rape myths and knowledge of victim reporting behaviors. Ordinary least squares (OLS) models were estimated to examine main effects of training, and moderating effects of impulsivity and education on training for our outcome variables. Results demonstrated that training, impulsivity, and education predicted improvements in attitudinal and cognitive outcomes. However, neither impulsivity nor education moderated—or changed—the effectiveness of training. In addition, training effects held over time, and we did not detect evidence of pretesting effects. Findings from this study improve our understanding of police sexual assault investigations training and provide methodological advancements for police training evaluations.

Removal From Activity After Sports- Related Concussion in Sex-Comparable Sports From the Michigan High School Athletic Association

Background: Research has demonstrated that female athletes are more likely to report their sports-related concussion (SRC) symptoms compared with male athletes; however, it is unknown if these reporting behaviors correspond to immediate removal from activity in sex-comparable sports. Purpose: To compare the incidence of high school student-athletes removed and not removed from activity after SRC in sex-comparable sports in Michigan. Study Design: Descriptive epidemiology study. Methods: Participants included student-athletes diagnosed with SRC participating in Michigan High School Athletic Association–sponsored athletic activities (22 sex-comparable sports) between 2016 and 2019. All SRCs were recorded in the association’s Head Injury Reporting System (HIRS) by certified athletic trainers, administrators, or coaches. Removal from activity indicated that the student-athlete was removed from play at the time of an injury event. If the student-athlete reported that his or her suspected injury event occurred earlier during activity or if symptom onset was delayed, “not removed from activity” was entered into the HIRS. Incidence proportions were calculated by dividing SRCs not removed by total SRCs in each sport. Risk ratios were calculated by dividing the incidence proportions of girls not removed by boys not removed in each sport. Results: A total of 4418 (2773 female, 1645 male) SRCs were reported, with the most occurring in female soccer players (n = 1023). Overall, 515 girls and 243 boys were not removed from activity, resulting in incidences of 0.19 (95% CI, 0.17-0.20) and 0.15 (95% CI, 0.13-0.17), respectively. Across all sports, girls were 1.26 (95% CI, 1.09-1.45) times as likely to not be removed from activity compared with boys. Of the sports with the most SRCs—soccer, basketball, baseball/softball, and lacrosse—girls had 1.37 (95% CI, 1.09-1.72), 1.15 (95% CI, 0.89-1.47), 1.19 (95% CI, 0.77-1.84), and 1.35 (95% CI, 0.94-1.95) times the risk of not being removed, respectively. Conclusion: Girls were at greater risk of not being removed from activity compared with boys in sex-comparable sports. Results from this study should be incorporated into SRC education in Michigan and potentially elsewhere to inform affiliated personnel of potential sex differences and protect female student-athletes from further harm.

Hypocrisy and legitimacy in the aftermath of a scandal: an experimental study of stakeholder perceptions of nonfinancial disclosure

PurposeThis study aims to investigate how stakeholders perceive the company's nonfinancial disclosure after a scandal has occurred. More specifically, the authors examine whether and how sustainability reporting practices in the aftermath of a scandal can influence the perceptions of stakeholders in terms of hypocrisy and legitimacy.Design/methodology/approachThe present research represents a companion paper to another study in this issue that investigates the adaptation of companies' reporting behaviors after a scandal. The results of the initial qualitative study informed the subsequent quantitative study developed in this article. The authors build on the evidence of the main paper and perform a 2 × 2 between-subjects experiment to examine how stakeholders perceive the actions of companies that aim to restore their eroded legitimacy through social, environmental and sustainability (SES) reporting.FindingsThe results suggest that when companies take responsibility and develop remedial, socially responsible corporate activities are perceived as less hypocritical and more legitimate. Moreover, we show an interaction effect between taking responsibility and developing remedial socially responsible actions on hypocrisy and legitimacy perception.Originality/valueThe present research takes advantage of an experimental design to investigate the effects of the adaptation of SES reporting from the perspective of stakeholders. The study provides insightful theoretical and practical implications for managers regarding how to handle a reputational loss and avoid perceptions of hypocrisy.

Concussion Reporting and Safeguarding Policy Development in British American Football: An Essential Agenda

The objective of this study was to examine concussion reporting and safeguarding policy in British American Football (BAF). Data were collected via an online survey tool. The data presented are part of a broader study that examined injury profiles, concussion reporting behaviors, and medical provision in BAF. Concussion-like symptoms were found in over half (58.8%) of the participants. Of those, 36.4% reported they had previously been formally diagnosed with a concussion while playing BAF. Just under half of the participants (44.7%) had suspected they had had a concussion, although it was not formally diagnosed, and 23.5% of the participants had previously hidden concussion symptoms. Fifty-eight percent of the teams reported they did not have a regular game-day medic, with a range of hired medical personnel who attended the games. Prominent barriers to hiring a medic included budget, institutional support shortfall, and lack of medic reliability and game knowledge. BAF is a developing sport with a clear vision for growth of participation. Yet, the current concussion and medical provision policies do not address the sport's welfare needs. Through discussion of these policies in the context of this study's findings, we highlight vital areas of concern in policy and practice that the British American Football Association needs to address in their medical and concussion policies.

Specific dietary practices in female athletes and their association with positive screening for disordered eating

Background To determine if following specific diets was associated with reporting behaviors that are consistent with disordered eating compared to non-diet-adherent athletes. We hypothesized that athletes adhering to specific diets were more likely to report disordered eating than those not following a diet. Methods One thousand female athletes (15–30 years) completed a comprehensive survey about athletic health and wellness. Athletes were asked to specify their diet and completed 3 eating disorder screening tools: the Brief Eating Disorder in Athletes Questionnaire, the Eating Disorder Screen for Primary Care, and self-reported current or past history of eating disorder or disordered eating. Descriptive statistics were calculated for all study measures and chi-squared tests assessed relationships between athletes’ dietary practices and their responses to eating disorder screening tools. Statistical significance was defined as p < 0.05. Results Two hundred thirty-four of 1000 female athletes reported adherence to specific diets. 69 of the 234 diet-adhering athletes (29.5%) were excluded due to medically-indicated dietary practices or vague dietary descriptions. Of the 165 diet-adherent athletes, 113 (68.5%) screened positively to ≥1 of the 3 eating disorder screening tools. Specifically, athletes practicing a low-carbohydrate diet were more likely to report disordered eating vs. athletes without dietary restrictions (80% vs. 41.8%; p < 0.0001). Conclusion Specific diet adherence in female athletes may be associated with reporting behaviors that are consistent with disordered eating. Health practitioners should consider further questioning of athletes reporting specific diet adherence in order to enhance nutritional knowledge and help treat and prevent eating disorders or disordered eating.