Survey exposes risky employee behaviour
By Miya Knights,
Employees have lax attitudes to corporate confidentiality and data protection, which challenges the assumption that IT alone can eliminate security risks, according to new research.
A survey of more than 1,000 employees and 1,000 IT professionals in 10 countries including the UK found behavioural mistakes were common, creating data security risks and criminal opportunities.
The most common habit that could weaken IT security defences was altering security settings on computers. One in five admitted to altering security settings on work devices to bypass IT policy so they could access unauthorised websites.
A further seven out of ten IT professionals said employee access unauthorised applications and websites, like online shops or social networks, had ultimately resulted in as many as half of their companies' data loss incidents. And half of the employees questioned used personal email to reach customers and colleagues, but only 40 per cent said this was authorised by IT.
Other common risky habits were associated with the physical security of IT systems, leaving them or their system logins and passwords unsecured: one in five employees stored passwords on their computer or wrote them down and left them pasted on their computers. This was most frequent among Chinese workers (28 per cent), but also with 10 per cent of UK staff questioned.
And the seeming disregard for corporate security procedures was most starkly demonstrated by the fact that one of four employees (24 per cent) admitted verbally sharing sensitive information to non-employees, such as friends, family, or even strangers.
The other noteworthy gaffes illustrate how the influence of mobile devices and the blurring of their use for work and personal use. Almost one in four employees had carried corporate data on portable storage devices outside of the office. And some 44 per cent had shared work devices with other outside work without supervision, while two of three employees admitted using IT devices daily for personal use.
John Stewart, chief security officer of survey sponsor, Cisco said understanding how employee behaviour affects the risks of data loss can help create more effective, localised training and security policies.
“Data protection requires teamwork across the company. It’s not just an IT job anymore,” he said.
The research conducted by US market researcher, Insight Express surveyed respondents from the UK, US, France, Germany, Italy, Japan, China, India, Australia, and Brazil.
advertisement
Latest Security Features
How to be a successful online fraudster
Ever wanted to know how easy it is to be an identity thief and earn a fortune? IT PRO reveals all…
- What you need to know about ID cards
- Lessons to learn from a year of data breaches
- Q&A: DNS inventor Paul Mockapetris
- Is the password ill-equipped for the modern world?
- Why is backing up given short shrift?
- Defending Europe against cyber attack
- The present and future of IT security
- I’m an IT manager, get me out of here!
- IT around the world: Russia
Latest Security Reviews
Fortinet FortiGate-3810A
Rating: ![]()
- Clearswift MIMEsweeper Web Appliance ENW
- NetASQ U6000 UTM appliance
- AVG Internet Security SBS Edition 8.0
- Finjan Vital Security Web Appliance NG-6000S
- LogLogic MX2010
- Exclusive: WatchGuard Firebox Core X750e
- Sophos ES4000 Security Appliance
- Microsoft Forefront Security for Exchange and SharePoint
- EXCLUSIVE: Juniper Networks SSG 550 UTM appliance
advertisement
Latest News Videos in Security
Video: Eugene Kaspersky outlines security threats
IT PRO speaks to Eugene Kaspersky, chief executive and founder of Kaspersky Lab.
White papers
Want more background on today's hottest IT trends?
Visit IT PRO's white paper library for more on virtualisation, encryption and other topics.
Register for IT PRO
You'll get exclusive member benefits including free white papers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.



Social Bookmark this article: What is this?