Wednesday, May 31 2023

A report on the challenges to a “cyber smart culture” within organizations reveals that conventional cybersecurity training methods are ineffective in building a strong cyber culture, as they lack creativity and often fail to engage employees.

Fujitsu surveyed 331 senior executives occupying various roles at organizations in 14 countries working in five broad industry groups: financial services, retail, manufacturing, energy, and central/federal government.

Researchers note that in an age of remote working, “cyber secure behaviors need to become second nature to people across the workforce spectrum.” However, they found that 54% of senior executives admit that in the past year, they have been unable to adjust their security policies to fit with changes in the threat landscape resulting from the pandemic.

Additionally, 45% of those surveyed believe that most people in their organization think that cybersecurity has nothing to do with them. With organizations increasingly exposed to vulnerabilities, employees must understand cybersecurity as not just a responsibility of CISOs, but also a responsibility of their own, notes Fujitsu. This misconception is exacerbated by ineffective cybersecurity training—61% of senior executives say that cybersecurity training is ineffective, and 2% even claim that training tailored to specific roles has never been done.

Technical and non-technical employees have been shown to have different views on the effectiveness of online training. When assessing the effectiveness of digital security training, 64% of technical respondents, i.e., those who work in teams dealing with IT, believe it to be effective, while only 45% of non-technical respondents do so. Only 29% of non-technical respondents view security training as effective even when it is tailored to their role and needs, while 43% of technical respondents do so.

Fujitsu found that the content of the training is important in ensuring the effectiveness of training. 69% of non-technical respondents say that training is most effective when it involves creative activities such as games and quizzes, but just 26% of non-technical workers find current training schemes to be interesting—35% say that they are boring, the same proportion claim that they are too technical, and 32% say that they are too long.

With the threat landscape evolving over the course of the pandemic, researchers suggest not only to take on new training approaches, but also to foster cybersecurity-related dialogue between senior executives and employees about cybersecurity practices in personal settings, which could prompt shifts in behavior in the work context.

Previous

Cybersecurity M&A and Funding Update: June 11

Next

US and EU Launch Trade and Technology Council

Check Also

Widget

Don’t Miss

Cloudburst Technologies Raises $3 million in Seed Funding

Julia Bischoff

Cloudburst Technologies, a monitoring and threat intelligence provider, announced that they raised $3 million in their seed investment round. Investments were led by Strategic Cyber Ventures with participation from Coinbase Ventures and Bloccelerate. Cloudburst Technologies specifically provides tools aimed at tracking and combating fraud in the cryptocurrency market. Investigators can do so without relying on […]

Two people collaborating over a computer by Desola Lanre-Ologun

Cyber Deals: Cloudburst, HUB Security, and Soucepass

Julia Bischoff

Cybersecurity venture funding activity and mergers and acquisitions: This week’s most sizable deals included AI powered security service providers and computing platforms. Funding Threat solutions provider for cryptocurrency Cloudburst Technologies raised $3 million in the seed funding round led by Strategic Cyber Ventures in order to help build on their current technology. HUB Security, a […]

Cyber Executive Moves: Vimeo, IntelePeer, National Cybersecurity Center, and More

Julia Bischoff

Former Tesla CISO joins Vimeo, NCC welcomes new board members, and Greenway Health hires new CISO. Video sharing platform Vimeo welcomes Mark Carter as their first chief information security officer. Carter has a variety of experience in the industry including serving as chief information security officer at Tesla.    Greenway Health, a health services software […]

NetBox Labs Raises $20 Million in Series A To Drive Open Source Transformation of Networking Industry

SecureDisruptions

NetBox Labs, an open source network management and automation startup, announced it has raised $20 million in Series A funding. Flybridge Capital is leading the investment with participation from GGV Capital, Grafana Labs CEO Raj Dutt, Mango Capital, Salesforce Ventures, Two Sigma Ventures, IBM, the Founder Collective, and Entrée Capital. As part of the round, […]

Fivecast Completes $20M Series A Raise With New US and Existing Australian Venture Investors

SecureDisruptions

US-based cybersecurity venture capital firm Ten Eleven leads funding, joining existing backers in CSIRO’s Main Sequence and South Australian Venture Capital Fund Australian open-source intelligence software company, Fivecast, has closed its Series A funding round with almost $20 million (AU$30m) raised to fuel its expansion and service contracts in key markets, including Five Eyes nations, […]

Push Security Raises $15M and Launches New Visibility and Employee-Powered Tools to Help Enterprises Scale SaaS Security

SecureDisruptions

LONDON–(BUSINESS WIRE)–Push Security, a SaaS security company, has raised $15M in Series A funding. GV (Google Ventures) led the funding with participation from Decibel and notable angels, including Dug Song, co-founder and former CEO at Duo Security, and Tray.io co-founder and CEO Rich Waldron. GV General Partner Karim Faris and Jon Oberheide, co-founder and former […]