Case $7-1$ APPENDIX

MEMO FROM FRIEND

Our bank recently decided to try a gamified IT training model. Before providing the training, we sent a survey to a number of our employees to test their IT security knowledge $($this group has not done any recent IT training$).$ We received $325$ usable responses from this group $($Group $1).$ We then had all employees of the bank complete the gamified training. Afterward, we asked all employees to fill out a survey. We received $531$ usable responses from this group $($Group $2).$ For Group $2,$ we asked the same questions we used to measure IT security knowledge as we did with Group $1.$ We also asked Group $2$ numerous questions about how much these employees enjoyed the training, how they rated it$,$ etc. A full description of the questions and data fields in the Excel file is included below. A few notes about the data file:

$$Any time a field is blank, it means there is no response for that question from the employee. Be careful as you import data to make certain that the values reflect that they are missing rather than showing the value as zero.

$$It may be obvious, but there is no data about Group $1$s satisfaction with the training because they had not yet completed the training.

$$The data does not include personally identifiable information, like an email address, so the data between the two groups cannot be linked for an employee who participated in both surveys. You might consider how this could influence the interpretation of your results.

Here$$s a description of the data in the Excel file.

$$ID$$a randomly generated unique identifier for each employee response in the dataset.

$$ReceivedTraining$$a dummy variable that equals $$Yes$$ if the employee filled out the survey after completing the gamified training and $$No$$ if the employee did not participate in the gamified training.

$$TotalKnowledge$$the percentage score of the employee on the IT security knowledge test. Scores can range from $0\mathrm{.}00000($missed every question$)$ to $1\mathrm{.}00000($answered every question correctly$).$

The next data fields measure how employees who completed the gamified training scored on the bank$$s learning objectives. Each question was measured on a $7-$point scale with $1=$ strongly disagree, $2=$ disagree, $3=$ somewhat disagree, $4=$ neither agree nor disagree, $5=$ somewhat agree, $6=$ agree, and $7=$ strongly agree.

$$BetterPerform$$the answer to $$I can better per$-$form my job because of this training.$$

$$ContentNeeded$$the answer to $$This program pro$-$vided the training content that I needed for my job.$$

$$UnderstandResponsibilities$$the answer to $$After the training, I feel proficient in the following areas: I understand my responsibilities for protecting information.$$

$$ApplyTechniques$$the answer to $$After the training, I feel proficient in the following areas: I can apply the risk management techniques used in protecting information.$$

$$KnowImportance$$the answer to $$After the training, I feel proficient in the following areas: I know the reputational importance of effective information security and the consequences of in$-$formation being lost or stolen.$$

All of the next data fields used the same basic question: $$Please compare the most recently completed gamified training that used an interactive, game$-$style approach with your last training experience that did not use this approach. Please rate which was better using the following dimensions. $...$

Employees could select any number on a $7-$point scale with responses anchored at $1=$ gamified training, $4=$ they were the same, and $7=$ traditional training. Employees rated their satisfaction with the training based on the following words:

$$Enjoyable

$$ Interesting

$$ Fun

$$ Informative

$$ Boring

$$ Waste of time

The next data fields contain rankings of different types of training. Employees were asked to $$Please provide a rank ordering of what you would prefer for future training.$$ A ranking of $1$ was the most preferred, followed by $2,3,4,$ and $5$ being the least preferred. The types of training that were ranked include the following $($with description$)$:

$$RankGamified$$online training using an interactive, game$-$style approach

$$RankOnlineVoice$$online training using mostly written materials with voiceover $($e$.$g$.,$ PowerPoint presentation with a narrator$)$

$$ RankWritten$$online training containing only written material

$$RankLecture$$in$-$person training with a traditional approach

$$ RankOther$$other; please describe