Published on July 27th, 2022 📆 | 1887 Views ⚑
0Friendly fire: 30% of employees unaware of their role in cybersecurity efforts
Read more: Are you giving employees enough time off?
Virtually all IT and security leaders (99%) agreed that a strong security culture is important in maintaining a companyās cybersecurity posture. Yet, despite rating their organizationās security 8 out 10, on average, 75% of organizations experienced a security incident in the last 12 months.Ā Ā
āEveryone in an organization needs to understand how their work helps keep their coworkers and company secure,ā Kim Burton, head of trust and compliance at Tessian, said in a press release. āTo get people better engaged with the security needs of the business, education should be specific and actionable to an individualās work.ā
Nearly half (48%) of security leaders say training is one of the most important influences on building a positive security posture. But the reality is that employees arenāt engaged; just 28% of workers in the United States and United Kingdom say security awareness training isĀ āengagingā and only 36% say theyāre paying full attention. Of those who are, only half say itās āhelpful,ā while another 50% have had a negative experience with a phishing simulation.
The report also reveals a disconnect when it comes to reporting security risks: 80% of security leaders believe ārobustā feedback loops are in place to report incidents, but less than half of employees feel the same, suggesting clearer processes are needed so that security teams have greater visibility of risk in their organization.Ā
Gloss