Most contemporary studies on information security focus on largely static phenomena in examining security‐related behaviours. We take a more dynamic, situational and interactionist approach that proposes that security‐related behaviours result from an interaction between the person and the perception of a threatening situation. We derive and define situational information security awareness based on situation awareness literature, and examine how individual‐level (innate traits, experience) and system‐level factors (design variations, warning signal) influence awareness, and how it influences subsequent threat and coping appraisals, and ultimately security‐related behaviours in a multi‐method phishing experiment including eye tracking and survey components with 107 employees. The results underscore the importance of situational information security awareness and show that past experience with phishing and a security warning increase awareness, while phishing emails' contextual relevance and misplaced salience decrease awareness. Situational information security awareness, in turn, increases perceived threat and perceived coping efficacy and, ultimately, actual behavioural responses to phishing attacks.

中文翻译：

---

大开眼界：情境信息安全意识在与安全相关的行为中的作用

当代大多数有关信息安全的研究都将重点放在静态现象上，以研究与安全相关的行为。我们采用一种更加动态，情境和交互主义的方法，该方法提出与安全相关的行为是人与人之间的交互作用以及对威胁情况的感知所致。我们基于态势感知文献来推导和定义态势信息安全意识，并检查个人级别（先天特征，经验）和系统级别因素（设计变化，警告信号）如何影响意识，以及它如何影响后续的威胁和应对评估以及最终在多方法网络钓鱼实验中与安全相关的行为，包括具有107名员工的眼动追踪和调查组件。结果强调了情境信息安全意识的重要性，并表明过去的网络钓鱼和安全警告经验可提高人们的意识，而网络钓鱼电子邮件的上下文相关性和放错位置的显着性则会降低人们的意识。态势信息安全意识反过来又增加了感知的威胁和感知的应对功效，并最终提高了对网络钓鱼攻击的实际行为响应。