# Establishing a Model for the User Acceptance of Cybersecurity Training
## 5 Discussion  
This study uses the TAM as a theoretical framework to analyse users' adoption of technology. Specifically, the study investigates how TAM factors, which were first presented by [1] and later reviewed and extended by studies [2; 3; 4], can be applied to the acceptance of cybersecurity training. Consequently, this study proposes the CTAM and identifies research gaps regarding the user acceptance of cybersecurity training. Th TAM extended versions include a number of factors that are not addressed in the current literature regarding the user acceptance of cybersecurity training, highlighting a need for further research in this area. These factors are visibility, voluntariness, anxiety, trialability, playfulness, and end user support. Visibility can assist in designing transparent training programmes, thus making the benefits of the training clear to users. Voluntariness suggests that optional content in training could enhance user receptiveness. When cybersecurity training is voluntary, users may feel more motivated and autonomous to engage with it. Furthermore, addressing anxiety by creating supportive atmospheres to users could improve training adoption rates. Trialability could facilitate the development of training sessions (e.g., exploratory or pilot sessions), increasing adoption and effectiveness. Users can remain committed and engaged if they are able to test out training modules without feeling pressured. An engaging and enjoyable training programme could also be achieved through the use of playfulness, leading to increased participation and retention. Providing robust user support can encourage users to feel more confident and capable, thereby facilitating adoption. These factors can significantly contribute to user acceptance and engagement in cybersecurity training, resulting in more effective and widespread adoption. As a key contribution, the study brought to light the influence of four factors (i.e., regulatory control, worry, apathy, and trust) on users' BI to adopt cybersecurity training. These factors can play a vital role in determining the effectiveness of cybersecurity training programmes. Firstly, regulatory control can be defined as a set of formal policies, rules, and  
Figure 3: Cybersecurity training acceptance model (CTAM). regulations that govern cybersecurity practises within an organisation. A structured and supportive environment for cybersecurity initiatives, including training, requires regulatory control. Providing users with a clear understanding of legal and organisational expectations regarding cybersecurity practises promotes compliance and accountability. Cybersecurity training programmes that consider regulatory control may result in higher compliance rates and a more conscious culture, whereas those that neglect regulatory control may result in a lack of enforcement and adherence to cybersecurity protocols, reducing the effectiveness of the training. Furthermore, the second factor \"worry\" refers to the concern users feel about potential cybersecurity threats and their consequences. In some cases, worry may be a significant motivator for users to attend cybersecurity training. For example, when users are aware of the potential risks and dangers of cybersecurity breaches, they are more likely to take the training seriously and practise what they have learned. If this aspect is taken into consideration, then engagement and motivation could be enhanced, leading to a better retention of information and application of cybersecurity measures. However, ref. [23] found that despite the possibility that worry may motivate users to engage in cybersecurity training, there was no meaningful linkage between worry and willingness to pay for or take up cybersecurity training. This finding suggests that worry alone does not drive the adoption of cybersecurity training, indicating that the combination of other factors is more likely to influence users' willingness to engage in cybersecurity training.