Forget ransomware and phishing attacks — CTOs rate human error as their number one security risk

Young Colleagues Working on Computers and Talking at a Workplace
(Image credit: Shutterstock)

New research shows that human error is still widely regarded as the main threat to business security, and that's straight from the horse's mouth.

Despite 90% of CTOs deploying multi-factor authentication, and 91% using identity access management technology for company security, over half (59%) said that human error is the biggest threat to their organization.

Humans were ranked above both ransomware attacks (48%) and phishing attacks (40%).

The research, conducted by STX Next, surveyed over 500 CTOs across the globe and found that while only a quarter (24%) believed that security was the biggest challenge facing their organization, human error was definitely a major concern.

More worryingly however, less than half (49%) of the companies involved in the study said that they had a cyber insurance policy in place, with less than six in ten (59%) implementing a ransomware protection solution within their organization.

The use of in-house security teams is worrying low, with just 36% of companies surveyed having a dedicated department for security services. Speaking on the findings, STX Next CISO, Krysztof Olejniczak said, “Despite deployment of comprehensive technology, poor implementation, substandard support processes or lack of governance can render these efforts useless.

“In recent years, the frequency and severity of cyberattacks across all industries has risen extraordinarily, and employees are often carrying the burden of being an organisation’s first line of defence,” he continued.

“While the threat of ransomware remains high, in many cases, cybercriminals aren’t in fact relying on incredibly advanced and sophisticated methods of attack, but on human error and social engineering techniques to gain access to an organisation’s systems.”

More from TechRadar Pro

TOPICS
Benedict Collins
Staff Writer (Security)

Benedict has been writing about security issues for over 7 years, first focusing on geopolitics and international relations while at the University of Buckingham. During this time he studied BA Politics with Journalism, for which he received a second-class honours (upper division), then continuing his studies at a postgraduate level, achieving a distinction in MA Security, Intelligence and Diplomacy. Upon joining TechRadar Pro as a Staff Writer, Benedict transitioned his focus towards cybersecurity, exploring state-sponsored threat actors, malware, social engineering, and national security. Benedict is also an expert on B2B security products, including firewalls, antivirus, endpoint security, and password management.

Read more
Hack The Box crisis simulation event
“Everyone will experience a hack” - how incident response can protect your organization
Hands typing on a keyboard surrounded by security icons
The psychology of scams: how cybercriminals are exploiting the human brain
ransomware avast
“Every organization is vulnerable” - ransomware dominates security threats in 2024, so how can your business stay safe?
Best email services: image of email with one unread message alert
Over 400 million unwanted and malicious emails were received by businesses in 2024
An image of network security icons for a network encircling a digital blue earth.
Why effective cybersecurity is a team effort
A digital representation of a lock
Exploits on the rise: How defenders can combat sophisticated threat actors
Latest in Pro
Isometric demonstrating multi-factor authentication using a mobile device.
NCSC gets influencers to sing the praises of 2FA
Sam Altman and OpenAI
OpenAI is upping its bug bounty rewards as security worries rise
Context Windows
Why are AI context windows important?
BERT
What is BERT, and why should we care?
A person holding out their hand with a digital AI symbol.
AI is booming — but are businesses seeing real impact?
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Dangerous new CoffeeLoader malware executes on your GPU to get past security tools
Latest in News
cheap Nintendo Switch game deals sales
Nintendo didn't anticipate that Mario Kart 8 Deluxe was 'going to be the juggernaut' for the Nintendo Switch when it was ported to the console, according to former employees
Three angles of the Apple MacBook Air 15-inch M4 laptop above a desk
Apple MacBook Air 15-inch (M4) review roundup – should you buy Apple's new lightweight laptop?
Witchbrook
Witchbrook, the life-sim I've been waiting years for, finally has a release window and it's sooner than you think
Amazon Echo Smart Speaker
Amazon is experimenting with renaming Echo speakers to Alexa speakers, and it's about time
Shigeru Miyamoto presents Nintendo Today app
Nintendo Today smartphone app is out now on iOS and Android devices – and here's what it does
iPhone 13 mini
The iPhone mini won't be returning, according to rumors – and you think that's a mistake