# Establishing a Model for the User Acceptance of Cybersecurity Training
## 1 Introduction  
In today's digital age, the importance of cybersecurity has increased exponentially, and organisations are increasingly dependent on robust security to defend their digital assets. An essential aspect of this defence strategy is cultivating a strong security culture throughout the organisation so that employees are aware of the cybersecurity threat and how they can mitigate it. In this endeavour, cybersecurity training plays a vital role by educating users on safe practises that they can use to combat common threats such as phishing, ransomware, and social engineering. Despite the apparent benefits of cybersecurity training, organisations face significant challenges in encouraging the acceptance and adoption of these programmes among their employees. Many employees have a tendency to be reluctant to participate in training sessions, which undermines the effectiveness of these training programmes.  
Understanding users' acceptance would aid future development. Many models have been developed to explain the user acceptance of technologies, introducing factors that affect user acceptance. These include widely recognised models such as the Technology Acceptance Model (TAM), Model of PC Utilisation (MPCU), Theory of Planned Behaviour(TPB), and Social Cognitive Theory (SCT). Although most of these models offer valuable insights into technology adoption, they often introduce factors that may not be directly applicable to the specific context of cybersecurity training acceptance. By focusing on factors such as Perceived Usefulness (PU) and Perceived Ease Of Use (PEOU), the TAM may address the key elements that influence an individual's decision to engage in and accept cybersecurity training. This direct relevance makes the TAM an ideal choice for this study, ensuring a focused and effective analysis of the factors that drive user engagement in the cybersecurity training context.  
Most importantly, there is a lack of comprehensive literature on training acceptance that takes into account factors that contribute to the user acceptance of cybersecurity training. To address this gap, this study seeks to answer the following question: How does current research relate to the factors mediating the user acceptance of technology? The study utilises the Technology Acceptance Model (TAM), a well-established theory initially introduced by [1] and subsequently reviewed and expanded upon by numerous studies, such as [2; 3; 4], to demonstrate how to encourage the acceptance and adoption of information systems.  
The research proceeds to explore the application of the TAM factors in the context of cybersecurity training acceptance. As a result, the study introduces a cybersecurity training acceptance model (CTAM) and underscores existing research gaps related to the user acceptance of cybersecurity training. Equally important, this study highlights factors that have not been discussed in the context of cybersecurity training acceptance by previous research. Identifying the key factors that drive the user acceptance of cybersecurity training contributes to informing the development of more effective cybersecurity training programmes that engage users and improve organisational security measures. This will ultimately support active participation and improve the broader cybersecurity culture.