A recent survey conducted by EY reveals that over half of U.S. employees are worried about the likelihood of their organization experiencing a cyberattack. The 2024 Human Risk in Cybersecurity Report gathered insights from 1,000 full and part-time workers across public and private sectors who regularly use computers for their jobs. This research highlights significant apprehension among employees regarding cyber threats and the potential risks associated with artificial intelligence (AI).
The findings indicate that nearly one-third of participants (34%) are concerned that their own actions could expose their employers to cyber threats. Particularly notable is the heightened anxiety among younger workers from Generation Z and Millennials, who reported feeling particularly vulnerable and ill-prepared to recognize potential cyber threats in the workplace.
The survey further explores perceptions of AI's role in cybersecurity, with 85% of respondents believing that AI is making cyberattacks more sophisticated. Additionally, 78% expressed worries about the increased prevalence of attacks attributed to AI technologies. "With new threats emerging constantly due to geopolitical tensions, changing regulations, and the rapid introduction of technologies like AI, the risk landscape is becoming more complex," remarked Jim Guinn, II, cybersecurity leader at EY America. Guinn emphasizes the importance of centering cyber strategies around people, encouraging organizations to empower staff through knowledge and training, while fostering a healthy skepticism towards all digital interactions.
The report underscores a strong demand for ongoing education, with 91% of respondents advocating for regular updates to cybersecurity training provided by their employers. Those who felt “rusty” in their cybersecurity knowledge were more likely to express hesitance about utilizing technologies such as AI at work. Alarmingly, 39% reported a lack of confidence in employing AI responsibly, and only 62% acknowledged that their employer was actively promoting responsible AI usage.
To address these concerns, the report suggests organizations consider gamifying their training programs to effectively convey essential cybersecurity concepts. Hands-on training initiatives for AI applications in the workplace are also recommended. The report highlights that “hands-on experience with new technologies like generative AI fosters a deeper understanding and enhances defensive thinking."
Dan Mellen, consulting cybersecurity chief technology officer at EY America, notes, "Cybersecurity training combined with leadership commitment throughout the organization shapes a robust security posture." When security practices are entrenched within a company's culture, employees are more likely to incorporate security considerations into their daily routines and proactively report any potential security incidents.
The growing complexity of cyber threats, coupled with the rapid advancement of technology, highlights the critical need for organizations to cultivate a knowledgeable and vigilant workforce. A commitment to education and training not only empowers employees but also fortifies the entire organization against an evolving cybersecurity landscape.
Ranking
