ThriveDX 2022 Global Cybersecurity Awareness Training Study Shows An Increased Maturity In Awareness Programmes And Higher Level Of Security At Most Companies

By Godson Umejiego, Senior Correspondent, USA

Researchers at ThriveDX announced Wednesday a marked uptick in the utilization of cybersecurity awareness programs across all industries in the last year, resulting in a higher level of security at a majority of enterprises. The findings are part of the company’s newly released 2022 Global Cybersecurity Awareness Training Study including 1900+ CISOs, security leaders, and IT professionals.

Almost all of the organizations surveyed, a total of 97 per cent, reported implementing some type of cybersecurity awareness training measures this past year, with most now using a combination of both phishing simulations and security awareness training. However, of the 1,900 security professionals surveyed, just 42 per cent reported involving their employees in security detection with the use of such measures as a Phishing Incident Button. It’s an important distinction as this type of engagement is known to further security by creating a virtual ‘human firewall’ and accelerating the reporting of potential threats.

“These statistics tell us two things. The first is that cybersecurity awareness is now reaching its adolescence with almost universal agreement that regular training improves enterprise security in a way that technology alone cannot,” said  CISO, North America at ThriveDX, Aaron Bostick. “Secondly, these numbers show us that we still have a long way to go to reach maturity and an understanding that the only true way to mitigate modern cyber risks is by positively changing employee behavior and building positive security cultures within our companies.”

65 per cent of IT professionals surveyed did agree that their cybersecurity awareness training programmes need expansion, and no one indicated a desire to reduce their current engagement.

The results of employee awareness efforts were impressive across the board with 19 per cent reporting better awareness; 14 per cent greater vigilance; 12 per cent said they increased their human firewall; and 99 per cent reporting an increase in corporate security. Ninety-six percent also noted a positive influence on their enterprise’s overall working atmosphere. Survey participants reported that the most important success factors were training course duration, an entertaining nature, customization, and individualization.