Training doesn’t do much good if people aren’t taking it to heart. A study by TalentLMS, performed on behalf of Kenna Security, has found that roughly 61% of employees asked to take a basic quiz on cybersecurity were unable to pass, even though 70% of them said they had recently received cybersecurity training, according to an article in SC Magazine. Using a pool of 1,200 employees, the study was attempting to evaluate cybersecurity habits, and knowledge of best practices, with several findings indicating that improving cybersecurity understanding among employees is still an uphill battle.
Particular concerns were raised by the findings that those who did worst on the quiz often felt best about the risks they were taking, with 71% of those who responded incorrectly to every question stating they felt safe with respect to cybersecurity.
Speaking of ways to help improve training and employee engagement with materials, James McQuiggan, security awareness advocate at KnowBe4, says, “Make the training engaging [and] interactive and provide users with an emphasis on protecting their passwords, watching out for phishing links and what it takes to protect the organization as much as the IT and infosec departments.”
Source:
https://www.scmagazine.com/home/security-news/61-percent-of-employees-fail-basic-cybersecurity-quiz/
