May 29, 2015 By Shane Schick 2 min read

CISOs probably didn’t need to see recent statistics to know that employees continue to take major cybersecurity risks, but the numbers are a grim reminder of the education and training necessary to fend off potential attacks.

According to a Blue Coat Systems report conducted by research firm Vanson Bourne, 4 out of 5 of the more than 1,500 people surveyed said they routinely take cybersecurity risks. This included clicking on links within possibly malware-laden email messages, using personal rather than corporate-issued mobile devices in the office, deploying unauthorized software or even looking at adult content on workplace machines. Only 20 percent said they never did any of these things, the study said.

It’s not like awareness of cybersecurity risks is at an all-time low. As CSO Online pointed out, many survey respondents acknowledged the dangers of opening email attachments they didn’t expect, and it’s no surprise that employees in the IT department tended to score better in awareness than their peers in other departments. From an industry sector perspective, however, it was alarming to see that those employed by tech companies tended to be among those most likely to do things that put their firm’s data security at risk.

To some extent, employees may be more likely to take cybersecurity risks because they have more opportunity to do so. Technologies such as software applications that were once only within the domain of IT departments to procure and deploy are now accessible by almost anyone, an expert told iTWire. It may be increasingly difficult for some firms to strike a balance between offering employees choices and flexibility from an IT perspective while also safeguarding mission-critical systems and data.

Although eWEEK suggested companies could work harder to set policies to mitigate cybersecurity risks, there aren’t a lot of great ideas on how best to enforce them. Viewing online content at work might lead to serious repercussions, of course, but should downloading an app without the IT department’s permission be an offense worthy of termination? What about using social media, where cybercriminals might manipulate the user’s emotions to scam money, data or worse? That’s the real challenge for CISOs. If nothing else, the study means that whatever solutions they propose, they’ll have some good numbers to back them up.

More from

3 Strategies to overcome data security challenges in 2024

3 min read - There are over 17 billion internet-connected devices in the world — and experts expect that number will surge to almost 30 billion by 2030.This rapidly growing digital ecosystem makes it increasingly challenging to protect people’s privacy. Attackers only need to be right once to seize databases of personally identifiable information (PII), including payment card information, addresses, phone numbers and Social Security numbers.In addition to the ever-present cybersecurity threats, data security teams must consider the growing list of data compliance laws…

ICS CERT predictions for 2024: What you need to know

4 min read - As we work through the first quarter of 2024, various sectors are continuously adapting to increasingly complex cybersecurity threats. Sectors like healthcare, finance, energy and transportation are all regularly widening their digital infrastructure, resulting in larger attack surfaces and greater risk exposure.Kaspersky just released their ICS CERT Predictions for this year, outlining the key cybersecurity challenges industrial enterprises will face in the year ahead. The forecasts emphasize the persistent nature of ransomware threats, the increasing prevalence of cosmopolitical hacktivism, insights…

Can memory-safe programming languages kill 70% of security bugs?

3 min read - The Office of the National Cyber Director (ONCD) recently released a new report, “Back to the Building Blocks: A Path Toward Secure and Measurable Software." The report is one of the first major announcements from new ONCD director Harry Coker and makes a strong case for adopting memory-safe programming languages. This new focus stems from the goal of rebalancing the responsibility of cybersecurity and realigning incentives in favor of long-term cybersecurity investments. Memory-safe programming languages were also included as a…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today