A recent survey of 2,000 UK employees revealed some concerning gaps in cybersecurity training. According to the study, 83% of employees had not received training on deepfakes and AI, 60% had not been trained on cybersecurity while working from home, and 51% had not been educated on how to avoid phishing scams.
Experts suggest that employers may be delegating cybersecurity training to IT teams, potentially overlooking the importance of involving HR in this crucial aspect of employee development. Martin Kraemer, a security awareness advocate, pointed out that HR may have other priorities such as workplace safety and compliance training, which could be diverting attention away from cybersecurity training.
However, it is crucial for HR to prioritize cybersecurity training, as breaches of employee data have increased by 41% in 2023. Kraemer emphasized the need for HR to take a more active role in cybersecurity training, rather than relying solely on IT departments.
Matt Eustace, a data protection officer, highlighted the importance of offering practical ways for employees to protect themselves from cyber attacks. Training sessions should cover common security threats like phishing emails and fraudulent phone calls, as well as provide tools for password management.
To make cybersecurity training more accessible and effective, experts recommend integrating it into daily roles and responsibilities. By meeting employees where they are and incentivizing training with rewards and recognition, organizations can ensure that their workforce is well-equipped to handle cybersecurity threats.
The survey was commissioned by KnowBe4 and conducted by OnePoll in Q2 of 2024. The UK Cybersecurity Practices at Work Report was published on 25 July.