CISOs aren’t leading by example when it comes to cyber security

Cyber security leaders engage in risky online behavior, according to a survey

New research has found that cyber security leaders may not lead by example and fail to obey security measures they ask staff to abide by.

According to a new report by Constella Intelligence, one in four global IT security leaders have used the same password for work and personal use. Of the respondents, 39% say they haven't changed their work email passwords within the last 30 days.

The survey also found that nearly half (45%) of cyber security leaders connect to public Wi-Fi without using a VPN, putting themselves and their entire organizations at risk. Something the FBI regularly warns users not to do.

The survey also found that 48% of CISOs use their work computers to log into social network platforms, and 63% of CISOs were willing to accept connections from unknown LinkedIn users.

The report, titled Cyber Risk in Today's Hyperconnected World, found that most organizations don't monitor social media for threats against their brand.

"More than half of respondents do not have a formal policy, process, or partner to monitor the digital public sphere—including social media, blogs, forums, or other spaces where threats to brands and executives commonly emerge—for threats that can ultimately have a damaging impact on brand and brand reputation," the report's authors said.

Related Resource

Security awareness training strategies for account takeover protection

Why you need an inside-the-perimeter strategy for internal threats

Security awareness training strategies for account takeover protection - whitepaper from MimecastDownload now

The survey revealed that 57% had suffered an account takeover (ATO) attack in their personal lives—most frequently through email (52%), followed by LinkedIn (31%) and Facebook (26%).

The research also found that almost three-quarters (74%) of cyber security leaders reported being a phishing or vishing attack's target in the last 90 days. One-third (34%) say they have been targeted in a phishing or vishing attack from someone impersonating their CEO.

"More than ever before, individuals and companies alike need to ensure that a robust and secure environment is in place," said Constella Intelligence CEO Kailash Ambwani.

"Amidst the rise in cyber attacks to organizations, many of which are perpetrated through C-suite impersonations, employee cyber security awareness is now arguably as important as an organization's security infrastructure. And as the professional and personal spheres become increasingly digitally intertwined, both leaders and employees must pay close attention to the role each one of us plays in collective cyber security hygiene."

Featured Resources

How virtual desktop infrastructure enables digital transformation

Challenges and benefits of VDI

Free download

The Okta digital trust index

Exploring the human edge of trust

Free download

Optimising workload placement in your hybrid cloud

Deliver increased IT agility with the cloud

Free Download

Modernise endpoint protection and leave your legacy challenges behind

The risk of keeping your legacy endpoint security tools

Download now

Recommended

Russia's "politically motivated" REvil raid could be used as leverage, experts warn
ransomware

Russia's "politically motivated" REvil raid could be used as leverage, experts warn

17 Jan 2022
Meta files lawsuit to uncover hackers targeting Facebook, WhatsApp
phishing

Meta files lawsuit to uncover hackers targeting Facebook, WhatsApp

21 Dec 2021
Five things to consider before choosing an MFA solution
Security

Five things to consider before choosing an MFA solution

17 Dec 2021
Australia and US sign CLOUD Act data-sharing deal to support criminal investigations
cyber crime

Australia and US sign CLOUD Act data-sharing deal to support criminal investigations

16 Dec 2021

Most Popular

How to move Microsoft's Windows 11 from a hard drive to an SSD
Microsoft Windows

How to move Microsoft's Windows 11 from a hard drive to an SSD

4 Jan 2022
Microsoft Exchange servers break thanks to 'Y2K22' bug
email delivery

Microsoft Exchange servers break thanks to 'Y2K22' bug

4 Jan 2022
Synology DiskStation DS2422+ review: A cube of great capacity
network attached storage (NAS)

Synology DiskStation DS2422+ review: A cube of great capacity

10 Jan 2022