A shocking number of workers still haven't received any security training

Date:
Thu, 25 Jul 2024 09:49:50 +0000

Description:
Many employees say they have not received any training on areas such as phishing or strong password creation.

FULL STORY ======================================================================

Despite being the first line of defense against cyber-attacks, many employees claim they have never received any form of cybersecurity training from their employers.

A report from KnowBe4 based on a poll of 2,000 workers says almost a fifth (18%) have never received any form of cybersecurity training from their companies.

Furthermore, 51% have not received any training on how to avoid phishing
scams - arguably the most widespread cybercriminal activity in the world. Finally, almost half (48%) have never been taught how to create strong passwords . Shared responsibility

Other cybersecurity practices that employees are yet to receive training on include:

Remote working best practices (60%)

What to do if your credentials have been breached (66%)

Social engineering (82%)

Deepfakes and AI (83%)

Bring your own device (84%)

While hardware and software vulnerabilities, zero-day and otherwise, are a great risk to organizations, most cyberattacks still start with a human
error. Sometimes its an unprotected database, sometimes its a person inadvertently clicking on a link in a phishing email, or downloading malware in an attachment, and sometimes its a weak password that hackers can easily break through with credential stuffing and brute-force attacks.

The technology landscape is changing all the time, therefore, not including training on new areas such as deepfakes and AI, could be putting UK organizations at further risk of cybercrime, said Javvad Malik,lead security awareness advocate at KnowBe4.

When a company does provide advice, almost three-quarters of workers say they do follow it - however 29% admitted they simply forgot about them. Additionally, 22% find cybersecurity advice too complicated to follow, and
14% believe cybersecurity is not their responsibility. More from TechRadar
Pro Docker instances targeted in major cryptojacking scam Here's a list of
the best firewalls today These are the best endpoint protection tools right now



======================================================================
Link to news story: https://www.techradar.com/pro/security/a-shocking-number-of-workers-still-have nt-received-any-security-training


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)