New research has found that cyber security leaders may not lead by example and fail to obey security measures they ask staff to abide by.
According to a new report by Constella Intelligence, one in four global IT security leaders have used the same password for work and personal use. Of the respondents, 39% say they haven't changed their work email passwords within the last 30 days.
The survey also found that nearly half (45%) of cyber security leaders connect to public Wi-Fi without using a VPN, putting themselves and their entire organizations at risk. Something the FBI regularly warns users not to do.
The survey also found that 48% of CISOs use their work computers to log into social network platforms, and 63% of CISOs were willing to accept connections from unknown LinkedIn users.
The report, titled Cyber Risk in Today's Hyperconnected World, found that most organizations don't monitor social media for threats against their brand.
"More than half of respondents do not have a formal policy, process, or partner to monitor the digital public sphere—including social media, blogs, forums, or other spaces where threats to brands and executives commonly emerge—for threats that can ultimately have a damaging impact on brand and brand reputation," the report's authors said.
RELATED RESOURCE
Security awareness training strategies for account takeover protection
Why you need an inside-the-perimeter strategy for internal threats
The survey revealed that 57% had suffered an account takeover (ATO) attack in their personal lives—most frequently through email (52%), followed by LinkedIn (31%) and Facebook (26%).
The research also found that almost three-quarters (74%) of cyber security leaders reported being a phishing or vishing attack's target in the last 90 days. One-third (34%) say they have been targeted in a phishing or vishing attack from someone impersonating their CEO.
"More than ever before, individuals and companies alike need to ensure that a robust and secure environment is in place," said Constella Intelligence CEO Kailash Ambwani.
"Amidst the rise in cyber attacks to organizations, many of which are perpetrated through C-suite impersonations, employee cyber security awareness is now arguably as important as an organization's security infrastructure. And as the professional and personal spheres become increasingly digitally intertwined, both leaders and employees must pay close attention to the role each one of us plays in collective cyber security hygiene."
-
M&S suspends online sales as 'cyber incident' continuesNews Marks & Spencer (M&S) has informed customers that all online and app sales have been suspended as the high street retailer battles a ‘cyber incident’.
-
Manners cost nothing, unless you’re using ChatGPTOpinion Polite users are costing OpenAI millions of dollars each year – but Ps and Qs are a small dent in what ChatGPT could cost the planet
-
JD Sports details cyber security revamp following January attackNews It hopes a multi-vendor approach will substantially improve its cyber resilience
-
96% of CISOs without necessary support to maintain cyber securityNews Security professionals are leaving due to stress, and called out lack of understanding from co-workers
-
Employees behaving badly?Whitepaper Why awareness training matters
-
Freshworks CISO Jason Loomis embraces the ‘shift left’ amid surging supply chain threatsCase Studies Fewer than 100 days in the role, Jason Loomis reveals his plans for the future of security at Freshworks, and discusses the rising threat of API vulnerablities
-
CISOs reveal secrets to pandemic success in critical organisationsNews The pandemic presented unique challenges for every business, but organisations tasked with delivering critical services may have worked the hardest
-
Almost 70% of CISOs expect a ransomware attackNews Many companies are willing to make ransomware payments in the face of the growing threat
-
Panel Profile: Moonpig head of cyber security Tash NorrisIT Pro Panel We get face-to-face with one of the IT Pro Panellists
-
SolarWinds bolsters its security response capabilities following hackNews The company is in the process of 'creating a new, highly-secure environment based upon the latest practices'
