Data Breach Costs Rise, But Cybersecurity Pros Still Take Risks
The latest data from IBM shows that the average cost of a data breach has gone up by 2% to a whopping $4.45 million. You would think that in the cybersecurity industry, people would be all about safety and security, right? I mean, it’s literally in the name.
But here’s the kicker: more than half (55%) of cybersecurity professionals have admitted to being risky when it comes to their cybersecurity practices at work.
Security professionals are the ones supposed to be setting the example and keeping their organization secure. I guess modern cyber threats don’t discriminate, so even security professionals need security awareness training.
You know what’s even more concerning? A study found that many organizations only hold security training once a year or once a quarter.
If the very people responsible for keeping our systems secure are engaging in risky behaviors and not taking the necessary steps to protect themselves, that’s not good. We’ve already seen major breaches caused by human error, so we can’t afford to be slack about remaining vigilant.
Let’s face it: every employee is a potential door for hackers. They’re the biggest risk factor. Just look at all the social engineering attacks. That’s why it’s crucial to educate the workforce on security best practices. We need to discourage risky behavior.
What counts as risky security behavior? There are 10 identified behaviors, including opening sketchy email attachments, watching movies or taking company data without permission.
It’s crucial organizations create a strong security culture. It’s not just about warning employees about threats, they must understand how to prevent any security issues.
Strengthening security culture is vital if we want to lower the risk of cyber attacks. We have to change mindsets, behaviors and the overall way we think about security. It’s all about seamlessly integrating security best practices into everything we do, tailoring them to every situation.
Luckily, there’s a new technological approach to assist us. It focuses on identifying and responding to threats caused by human actions, like phishing and social engineering. It even involves automated real-time coaching. This is a game-changer compared to traditional security training.
At the end of the day, cybersecurity should be a concern for everyone in the organization. We need every department and every employee to be vigilant and prioritize appropriate responses to potential threats. If we can achieve that, we’ll be in a great place to tackle any security challenges that come our way.
Free Phishing Security Test
Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.
Here’s how it works:
- Immediately start your test for up to 100 users (no need to talk to anyone)
- Select from 20+ languages and customize the phishing test template based on your environment
- Choose the landing page your users see after they click
- Show users which red flags they missed, or a 404 page
- Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
- See how your organization compares to others in your industry
PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/phishing-security-test-partner?partnerid=001a000001lWEoJAAW