The findings of top 10 risky behaviours of employees that organisations have detected was conducted byKnowBe4 through it’s  SecurityCoach, a security awareness training and simulated phishing platform. These behaviours include:

• Entertainment domain/streaming services
• Gaming website
• Greymail
• Adult website
• Unauthorized or malicious application
• Risky website detected
• Unauthorized removable media
• Sharing of personal identifiable information (PII)
• Cloud backup or cloud storage
• Malicious email attachment opened

The human factor is involved in 82% of data breaches, according to the 2022 Verizon Data Breach Investigations Report. However, according to IDC, less than 3% of IT spending is allocated to help secure the human layer.

“With the proliferation of social engineering attacks, employees continue to be the biggest risk factor,” However, with proper training and coaching, they can become a human firewall and your last line of defence. These findings are definitely concerning and reiterate the importance of developing a strong security culture.” said Stu Sjouwerman, CEO, KnowBe4.