Thanks for raising some thoughtful discussion on the subject.

I agree that this thought requires further research.

At present in India I donot see any thought being given to the interplay of Behavioural Science and Information Security. May be such research is on in US. Let this be further explored.

One interesting point Gary has brought is the “Internal Motivation” through “External Stimuli”.

I have stated that “Mandate” is an important motivator. Others identify “Fear” say of rejection by society is a motivator. I suppose there is a link between the two because “Non Compliance of a Mandate resulting in adverse consequences is a motivator”. I have practically experienced this in most of my IS motivational lectures.

I believe that external drivers do have an impact on internal drivers. Can any human being exist in a vacuum?..Does one get or donot get internal motivation influenced by external stimuli?.. can be further debated.

If there is an “inductive influence” of the external drivers on the internal drivers, then an attempt to include both in an integrated model is a possibility.

Why Pentagon as a visual symbolism?.. I could not say that the drivers listed had any distinct progressive relation. There could be some people who move from awareness to acceptance to availability and then directly move to compliance. Others may move from awareness to inspiration and then to compliance. Some may move from mandate to compliance. Hence I could not use a stacking model like the Pyramid or something similar and for want of anything better chose the Pentagon.

Further research is open to make changes.
The attempt here is to draw the attention of technical persons who are obsessed only with technology as a parameter of Information security to suggest that they need to look at human behavioral aspects. Since many of the Information Security experts donot have good exposure to behavioural sciences until they reach top echelons of corporate management, the security professionals at the lower levels need to be reminded of this factor.
I hope a visualized model could be useful.

I am open to all kinds of suggestions and debate in this regard.

Though it is an interesting approach, this requires a lot more research and thought to be a genuinely useful and predictive model.

Kind regards,
Gary