Aware, but don’t care – how big a cloud security nightmare are you?
Survey finds that despite massive rise in cybersecurity awareness, locked down doesn’t necessarily apply to employee behaviours
1st July 2020 – Nearly two thirds (66%) of remote workers in Nigeria , Kenya and South Africa say they are more conscious of their organisation’s cybersecurity policies since the lockdown began – according to a new study from Trend Micro Incorporated a global leader in cybersecurity solutions. However, it might be too early for businesses to breathe a sigh of relief, as the results also found that lockdown does not necessarily apply to employee cybersecurity habits, as risky behaviours persist.
The study, which questioned over 13,000 remote workers across 27 countries, including 508 respondents from Nigeria, Kenya and South Africa on their attitudes towards corporate cybersecurity and IT policies, indicates that there has never been a better time for companies to take advantage of heightened employee cybersecurity awareness to crack down on bad habits once and for all.
But with 93% of remote workers claiming to take instructions from their IT team seriously, 89% agreeing that workplace cybersecurity is partly their responsibility, and 50% acknowledging that using non-work applications on a corporate device is a security risk, further education doesn’t appear to be the answer.
Despite this apparent understanding, large numbers of employees still admit to dangerous cybersecurity practices. For example, 17% confessed to using a non-work application on a corporate device, and over a third (34%) said they had uploaded corporate data to that application. Meanwhile 34% of remote workers say that they use their work laptop for personal browsing, and only 38% fully restrict the sites they visit. Concerningly over a third 34% likely break corporate security policy, by accessing business data from a personal device.
READ ALSO: VMware: CEOs Should Have Technology In Their DNA If They Are To Succeed
Examining the results in more detail, evidence shows these behaviours are more a case of attitude than ignorance. Over 24% of remote workers said that they don’t give much thought to whether the apps they use are sanctioned by IT or not, because they just want the job done. And one in five (17%) spoke about “getting away” with using a non-work application as the solutions provided by their company are rubbish.
With info security understanding there, but employee attitudes towards it varying wildly, how can organisations encourage better behaviour from their remote workers? Particularly as a return to work is pushed further and further back…
Dr Linda K. Kaye, Cyberpsychology Academic at Edge Hill University explains: “There are a great number of individual differences across the workforce. This can include individual employee’s values, accountability within their organisation, as well as aspects of their personality, all of which are important factors which drive people’s behaviours. To develop more effective cybersecurity training and practices, more attention should be paid to these factors. This, in turn, can help organisations adopt more tailored or bespoke cybersecurity training with their employees, which may be more effective.”
Indi Siriniwasa, Vice President Sub-Saharan Africa at Trend Micro, argues: “In today’s interconnected world, unashamedly ignoring cybersecurity guidance is no longer a viable option for employees. So, it’s encouraging to see that so many take the advice from their corporate IT team seriously. Having said that, there are individuals who are either blissfully ignorant or worse still who think cybersecurity is not applicable them and will regularly flouter the rules. Hence having a one size fits all security awareness programme is a non-starter as diligent employees often end up being penalised. A tailored training programme designed to cater for employees may be more effective.”
To find out how much of a cyber security nightmare you are, why not take a look at the four common information security “personas” below:
About Trend Micro
Trend Micro Incorporated, a global leader in cybersecurity solutions, helps to make the world safe for exchanging digital information. Our innovative solutions for consumers, businesses, and governments provide layered security for data centers, cloud environments, networks, and endpoints. All our products work together to seamlessly share threat intelligence and provide a connected threat defense with centralized visibility and control, enabling better, faster protection. With more than 6,000 employees in over 50 countries and the world’s most advanced global threat intelligence, Trend Micro secures your connected world. For more information, visit www.trendmicro.com.