British businesses are being put at risk by failing to properly educate their workers about effective security provisions, a government study has claimed.
Just over a quarter of employees at 500 leading UK firms rate their security training as having been effective enough to change their behaviour towards dealing with online threats, according to a new survey undertaken by Axelos, a UK Government/Capita joint venture.
Similarly, only 42 percent said that their training was “very effective” at providing general awareness of information security risks, meaning many companies are putting themselves at risk.
Worryingly, Axelos’ survey revealed that, when asked how many staff had completed their information security awareness programme, respondents in a quarter of organisations said that no more than 50 percent of staff had done so.
The findings are particularly concerning as recent Government research also found that 75 percent of large organisations had suffered staff-related security breaches in 2015, with half of the worst-rated breaches caused by human error.
“Despite organisations continuing to invest heavily in technology to better protect their precious information and systems, the number and scale of attacks continues to rise as they discover there is no ‘silver bullet’ to help them achieve their desired level of cyber security,” said Nick Wilding, head of cyber resilience best practice at Axelos.
“And they often underestimate that the role that their own employees – from the boardroom to the frontline – can play: staff should be their most effective security control but are typically one of their greatest vulnerabilities.
“Cyber-attacks are now business as usual and the resulting financial and reputational damage can be significant. As a result, organisations need to be more certain that they are engaging their people effectively to better equip them to manage the cyber and information security risks they now all face.”
How much do you know about Internet security? Take or quiz!
Tesla makes key advances toward advanced self-driving rollout in China as chief Elon Musk meets…
New UK rules bring in basic security requirements for millions of internet-connected devices, aiming to…
Google parent Alphabet sees market capitalisation surge over $2tn on plan to over first-ever cash…
Google asks Virginia federal court to dismiss case brought by US Justice Department and eight…
Snapchat parent Snap reports user growth, revenues in spite of tough competition, in what may…
Quick-growing fast-fashion company Shein must comply with most stringent level of EU digital rules after…