Cybersecurity threats faced by organizations are growing in volume and sophistication. It is well-acknowledged that human issues are a significant reason underlying these threats. Organizations report the need for skill development to face these challenges. Therefore, to equip users with skills to curb the threats, we develop process-related cybersecurity Game-based Learning (GBL) artefacts using ADR (Action Design Research). These artefacts employ procedures prescribed by NIST (National Institute of Standards and Technology) and CCMP (Cyber Crisis Management Plan) to teach users cybersecurity concepts such as cyber crisis management, malware incident forensics, incident handling and password management. The study details the artefacts and design process, and highlights implications for practitioners and academicians in GBL and Design Science Research (DSR) using a nascent design theory.

The developed artefacts were employed to study the effect of psychological variables on game performance. We specifically studied the effect of immersion, cognitive load and perceived autonomy on game performance of players. Our study attempts to formulate a theoretical framework based on the above-mentioned variables. Since this theoretical framework is an amalgamation of the Cognitive Load Theory (CLT) and Self-Determination Theory (SDT), it enables us to study the competing effects of the theories and provide insights on the varying levels of effects of the psychological variables on game performance.

We further delve into more nuanced aspects of the GBL artefacts. We study a specific gamification feature called avatar. Immersion-related features such as avatars attempt to immerse the player in a self-directed inquisitive activity. It also offers players, the freedom of choice. This helps satisfy the need for autonomy which refers to psychological freedom and volition to fulfill a certain task. These characteristics of avatars have been shown to influence game performance. Therefore, we also study the effects of avatars on game performance.