Trends in employee security awareness.

Terranova Security has published a report on security awareness among employees in the US, finding that “just over a third (35%) of employees express little-to-no concern about data theft at work, and 20% believe they can't be targeted at all by cyber criminals.” Additionally, “41% of employees say they work in a company where cyber security awareness training is mandatory. 43% haven't participated in any cyber security training, and nearly a third (31%) indicated that their company doesn't offer any relevant training at all.”

Meanwhile, just over a third of employees believe their organization’s cybersecurity knowledge is adequate:

“More than one in three respondents believe that the level of cybersecurity knowledge in their company is average to good (34%). However, their assessment of themselves and their colleagues is harsher: 30% say that their personal knowledge is good, and only 22% say that their colleagues have a good level of knowledge, which suggests a lack of training and interest in this area. Fewer than 10% of respondents globally say that they, their company, and their colleagues have an excellent level of knowledge (i.e., have a score of 10 on a scale of 1 to 10). Therefore, this part of the survey shows a lot of room for progress from being aware of cyber issues to achieving fundamental knowledge.”