New report underscores importance of cyber-security training

by Brett Henebery03 Apr 2017
Data from a cyber insurance provider CFC Underwriting shows that a quarter of its claims in 2016 could have been avoided through better staff training on cyber risks.

CFC’s research revealed that 27% of SME staff are not being adequately educated about online threats and suggested more thorough training in this area.

The core of this issue, according to the underwriter, is that many of these organisations simply do not know where to start and lack a good understanding of their cyber risk profile.

The research follows a 2016 report which called for greater cyber-security training. The report found that 64% of Australian CIOs said the number of detected security threats has increased compared to 12 months ago.

The top three cyber-security risks facing organisations in the next five years are spying/ransomware (49%), data abuse/data integrity (49%), and cyber-crime (46%).

According to another report, a significant driver of these issues is learners who have a poor sense of cyber-security who use unsecured private devices for work.

The report found that 42% use private devices for work and accessing email and corporate data. More than half of respondents (52%) admitted to using private accounts (such as Enterprise File Sharing Services) to access or store corporate files. Only a third of employees said they had never done this.

However, to tackle this issue head-on, one company, Eukleia, has begun training its staff to tackle these threats through an interactive game, called Zero Threat.

The game puts learners in control of a network made up of both technology and people, full of valuable data which the learner must protect from a relentless onslaught of cyber-threats.

These threats are based on real cyber-criminal tactics, like social engineering and phishing. To stop them, the learner must ‘play’ countermeasures, and these too are closely based on the security measures employees need to be taking in real life.

As the demands of the technology-driven workplace become more complex, improved training of staffs’ digital skills has other benefits too, as Randstad Australia and New Zealand CEO, Frank Ribuot, pointed out in January.

“Careers across the board are transforming with advances in technology, as we change the way we work, the way we communicate with customers and employees, and the way in which consumers spend and engage with brands,” he said.

“In response, organisations are adopting increasingly sophisticated digital strategies to maintain a competitive edge and deliver a superior customer experience, but the workforce is not feeling confident their employer is keeping them up to speed with the pace of change.”

Related stories:
Call for more training amidst cyber threats
Use of personal devices putting companies at risk – study