The Annual Cybersecurity Attitudes and Behaviours Report, recently published by the Australian Cyber Collaboration Centre, has brought to light an array of concerning cybersecurity behaviours among workers both in Australia and globally. The report surveyed 6,500 participants spanning various age groups across eight countries, including Australia and New Zealand. It highlights a significant trend of employees sharing company data with Artificial Intelligence (AI) tools, among other cybersecurity issues.

Despite advancements in cybersecurity education by IT and security leaders, several troubling attitudes and behaviours persist. These could potentially undermine efforts to bolster security frameworks within organisations.

Frustrations with Cybersecurity

The survey indicates a growing frustration among Australians and international counterparts regarding continuous cybersecurity requirements. In the context of Australia’s cybersecurity landscape, characterized by widespread digital business transformation and frequent data breaches, 52% of respondents described online security as “frustrating”. Additionally, 44% expressed feelings of intimidation surrounding the complexities involved in maintaining online safety, marking a notable drop in the perceived value of online security. Only 60% of Australians surveyed currently believe that the efforts to remain secure online are worthwhile, reflecting a significant 9% decrease from the previous year.

Among generational cohorts, Gen Z and Millennials express the most pessimism regarding their ability to navigate online safely. Many have reduced their online activities due to security concerns. These findings point to a growing discontent with the negative aspects of the digital environment at work, where complexities and friction associated with cybersecurity may lead to disengagement from essential security practices, potentially jeopardising organisational data security measures.

Responsibility for Cybersecurity

The report also uncovers a shifting perception of responsibility regarding cybersecurity. A large majority (90%) of Australian respondents believe that tech platforms and apps should bear the primary responsibility for protecting personal information. This attitude extends to workplaces, where IT and security departments are largely seen as responsible for information security. However, there appears to be an increasing trend where employees attribute responsibility to the tech industry itself, with a 7% decrease in individuals considering themselves primarily accountable for their own cybersecurity.

Matthew Salier, the CEO of the Australian Cyber Collaboration Centre, highlighted a prevalent complacency, with 43% of Australians assuming their devices are automatically secure, particularly among younger demographics.

Key Issues and Challenges

Further analysis reveals that Australians continue to struggle with maintaining fundamental cybersecurity practices:

  • Password Management: Many individuals, notably Gen Z, opt for personal information such as family or pet names for passwords. While 29% of those with multiple online accounts maintain records in physical notebooks, only 12% use password managers.

  • Multi-Factor Authentication (MFA): Awareness of MFA has surged, with 81% having heard of it, an 11% increase from the previous year. However, actual adoption varies due to user experience challenges, especially among younger users who have abandoned it after initial attempts.

  • Phishing Awareness: Confidence in identifying phishing emails remains relatively high at 67%, yet rising phishing sophistication, especially involving AI, has left 10% of respondents uncertain of their ability to detect such threats.

AI Concerns in Cybersecurity

Regarding the burgeoning issue of AI in cybersecurity, the report reveals:

  • Over half (52%) of Australian employees have not received training on safe AI use, despite notable concerns of data leakage.
  • Globally, 38% of respondents admitted to sharing sensitive work information with AI without employers' knowledge, a trend more prevalent among younger workers (46% of Gen Z and 43% of Millennials).
  • There exists a low confidence in organisations’ abilities to implement AI ethically, with only 35% of Australians trusting companies to manage AI responsibly.

Interestingly, concerns about job displacement due to AI are more pronounced among younger generations, with nearly half of Millennials and Gen Z predicting employment changes due to AI integration, in stark contrast to the more confident Baby Boomer and Silent Generation cohorts.

Role of Cybersecurity Training

Despite these concerns, the report offers some optimism with positive outcomes from existing cybersecurity training programs. An overwhelming majority (83%) who received training reported finding it beneficial, with significant improvements noted in recognising phishing attempts and adopting MFA. The perceived effectiveness of these training interventions has grown compared to the previous year, offering a glimmer of hope for IT and cybersecurity leaders.

In summarising the findings, Salier emphasised the importance of equipping both individuals and organisations with the requisite tools to tackle the evolving threat landscape shaped by the increasing influence of AI.

Source: Noah Wire Services