CTOs consider human error to be their biggest cybersecurity threat

Ransomware and phishing were also highlighted as serious concerns by CTOs.

  • Monday, 4th March 2024 Posted 8 months ago in by Phil Alsop

Research from STX Next, a global leader in IT consulting, has found that six in ten (59%) CTOs believe human error to be the biggest cybersecurity threat facing their organisation. Human error, which can range from downloading a malware-infected attachment to failing to use a strong password, was found to be the more threatening than the potential of both ransomware (48%) and phishing (40%) attacks.

In response, CTOs are deploying a range of tactics in order to protect their teams and wider organisation, and are taking advantage of the many solutions on the market. 94% of companies said that they have now deployed multi-factor authentication (MFA), 91% are using identity access management technology (IAM), 58% are using security information and event management (SIEM) technology and 86% are using single sign-on (SSO) solutions.

The findings were taken from STX Next’s 2023 Global CTO Survey, which surveyed 500 global CTOs about the biggest challenges facing their organisation. Other key findings from the research included:

• A quarter (24%) of CTOs said that security was their biggest challenge across the organisation, the fourth most popular response.

• Despite the growing threat of attack, just less than half (49%) of companies surveyed said that they currently have a cyber insurance policy in place, while 59% of businesses have implemented a ransomware protection solution.

• In-house security teams are still in the minority: just 36% of companies have a dedicated team or department providing security services, whereas 53% of companies are using the services of external specialised companies for security.

Krzysztof Olejniczak, CISO at STX Next said: “The data from this year’s survey indicates that employees are still the weakest point of company security. Despite deployment of comprehensive technology, poor implementation, substandard support processes or lack of governance can render these efforts useless. In recent years, the frequency and severity of cyberattacks across all industries has risen extraordinarily, and employees are often carrying the burden of being an organisation’s first line of defence.

“While the threat of ransomware remains high, in many cases, cybercriminals aren’t in fact relying on incredibly advanced and sophisticated methods of attack, but on human error and social engineering techniques to gain access to an organisation’s systems. And this method of attack is still the most popular and successful. Human error can also include internal fraud, where employees intentionally do not follow procedures and expose critical information.

“In response, it’s crucial that management teams focus not only on educating staff to recognise and respond to new threats but also on periodically testing their resilience through simulated attacks or phishing and ransomware tests. Frequent testing also encourages good cyber hygiene practices and behaviours. On top of testing and education, solutions such as MFA, IAM and SSO are quickly becoming an industry standard for the modern business and can provide an additional line of defence to limit the risk of human error.

“It’s also inevitable that the smaller a company is in headcount or revenue, the less likely it is to have a dedicated security team. This is why more businesses are accessing the services of specialised cybersecurity solutions or providers in the form of vCISO services.

“Without putting protections in place, organisations place themselves at risk of being impacted by attacks, either directly or via their supply chain. Whether in-house or outsourced, CTOs and CISOs must take steps to support their teams and ensure that they are prepared and protected for the inevitability of attack.”

Research finds that the industry is struggling with a growing resource and skills gap while challenged by visibility, resilience, increasing security...
The promise of AI is on every biopharma’s radar, but the reality today is that much of the industry is grappling with how to convert the hype into...
IT teams urged to resolve ‘data delays’ as UK executives struggle to access and use relevant business data.

‘Playtime is over’ for GenAI

Posted 1 week ago by Phil Alsop
NTT DATA research shows organizations shifting from experiments to investments that drive performance.

GenAI not production-ready?

Posted 1 week ago by Phil Alsop
Architectural challenges are holding UK organisations back - with just 24% citing having sufficient governance to implement GenAI.

AI tops decision-makers' priorities

Posted 1 week ago by Phil Alsop
Skillsoft has released its 2024 IT Skills and Salary Report. Based on insights from more than 5,100 global IT decision-makers and professionals, the...

The state of cloud ransomware in 2024

Posted 1 week ago by Phil Alsop
Ransom attacks in the cloud are a perennially popular topic of discussion in the cloud security realm.
Talent and training partner, mthree, which supports major global tech, banking, and business clients to build job-ready teams, has revealed the...