Applying Gamification to Promote Privacy and Information Security Awareness in the Public Sector

Context: Traditional awareness programs on privacy and information security in the public sector are often perceived as unengaging and ineffective in promoting lasting behavioral change. Human error remains a key vulnerability, and there is growing interest in more engaging approaches such as gamification. Objective: This study investigates whether gamification can enhance privacy and information security awareness among public servants, and identifies the organizational factors that influence its perceived feasibility. Method: We conducted a quantitative survey with 518 Brazilian public servants, combining descriptive statistics with Likert-scale analyses to assess perceptions on traditional and gamified approaches, engagement elements, and institutional readiness. Results: Respondents rated traditional methods as moderately effective but lacking in engagement. Gamification was perceived as more motivating and effective for knowledge retention and behavioral change. Key adoption barriers included organizational culture and lack of understanding, while leadership support and digital familiarity were seen as enablers.  Conclusion: Gamification is viewed as a promising and feasible strategy for improving awareness training in the public sector. However, its successful adoption depends on overcoming cultural resistance and ensuring institutional support. The findings provide empirical evidence to guide future implementations and inform training policy design.