ThriveDX 2022 Global Cybersecurity Awareness Training Study Shows an Increased Maturity in Awareness Programs and Higher Level of Security at Most Companies

News provided by

Sep 06, 2022, 08:30 ET

MIAMI, Sept. 6, 2022 /PRNewswire/ -- Researchers at ThriveDX announced today a marked uptick in the utilization of cybersecurity awareness programs across all industries in the last year, resulting in a higher level of security at a majority of enterprises. The findings are part of the company's newly released 2022 Global Cybersecurity Awareness Training Study including 1900+ CISOs, security leaders, and IT professionals.

ThriveDX 2022 Cybersecurity Awareness Training Study

Almost all of the organizations surveyed, a total of 97%, reported implementing some type of cybersecurity awareness training measures this past year, with most now using a combination of both phishing simulations and security awareness training. However, of the 1,900 security professionals surveyed, just 42% reported involving their employees in security detection with the use of such measures as a Phishing Incident Button. It's an important distinction as this type of engagement is known to further security by creating a virtual 'human firewall' and accelerating the reporting of potential threats.

"These statistics tell us two things. The first is that cybersecurity awareness is now reaching its adolescence with almost universal agreement that regular training improves enterprise security in a way that technology alone cannot," said Aaron Bostick, CISO, North America at ThriveDX. "Secondly, these numbers show us that we still have a long way to go to reach maturity and an understanding that the only true way to mitigate modern cyber risks is by positively changing employee behavior and building positive security cultures within our companies."

65% of IT professionals surveyed did agree that their cybersecurity awareness training programs need expansion, and no one indicated a desire to reduce their current engagement.

The results of employee awareness efforts were impressive across the board with 19% reporting better awareness; 14% greater vigilance; 12% said they increased their human firewall; and 99% reporting an increase in corporate security. Ninety-six percent also noted a positive influence on their enterprise's overall working atmosphere. Survey participants reported that the most important success factors were training course duration, an entertaining nature, customization, and individualization.

"This really validates the human-centric approach that we take towards security awareness," Roy Zur, CEO of ThriveDX for Enterprise, said. "Involving employees, offering end-to-end customized security training 'beyond awareness', and gaining employees' commitment to security is the number one way to mitigate cyber risk."

Other key findings:

Currently, the most popular training topics are courses on phishing and malware, password security, email security, social engineering and ransomware.
72% refrain from pre-announcing phishing campaigns to employees
The biggest challenges cited in implementing awareness programs were achieving user acceptance (25%), workload and resources (22%) and program execution (14%)
The use of mission statements, policies, guidelines, metrics and systematic training is increasing with 58% of respondents reporting some form of security awareness regulations in place.

The full 2022 Global Cybersecurity Awareness Training Study is available here.

About ThriveDX

ThriveDX's enterprise solutions specialize in the human side of cybersecurity, offering end-to-end cybersecurity training and talent solutions. Our team is comprised of military-trained cyber experts, industry veterans, and educators united under the mission of closing the worldwide skills and talent gap in cybersecurity. The ThriveDX enterprise suite was born out of the formation of best-in-class cyber companies: Cybint Solutions (Cybersecurity Professional Bootcamp), Kontra Application Security (Application Security Training), Lucy Security (Security Awareness Training + Phishing), ThriveDX Labs (Managed Cybersecurity Services), and HackerU Pro (Custom Training with an Expert Instructor). Learn more here: ThriveDX for Enterprise.

Follow ThriveDX for Enterprise:
LinkedIn: http://linkedin.com/company/thrivedx-enterprise/
Twitter: http://twitter.com/TDX_Enterprise
Facebook: http://facebook.com/thrivedxenterprise

SOURCE ThriveDX