--- title: 75% of employees pose a security risk to their business description: The State of Privacy and Security Awareness Report has found that employees actually performed worse this year than in 2017 across all eight threat vectors that were measured. Some of these include knowing how to spot a phishing email and identifying malware warning signs. image: https://blog.strategicgroup.net.au/hubfs/advice-advise-advisor-7075-160859-edited.jpg --- [![Strategic Group](https://blog.strategicgroup.net.au/hs-fs/hubfs/SGRP%20Logo%20-%20Inverted%20white.png?width=2951&name=SGRP%20Logo%20-%20Inverted%20white.png "Strategic Group")](https://www.strategicgroup.net.au) - [Home](https://www.strategicgroup.net.au/) - [About](https://strategicgroup.net.au/about/) - [Careers](https://strategicgroup.net.au/careers/) - [Services](https://strategicgroup.net.au/services/) - [IT Support & HelpDesk](https://strategicgroup.net.au/it-support-helpdesk/) - [Cloud Computing](https://strategicgroup.net.au/cloud-computing/) - [Private Cloud](https://info.strategicgroup.net.au/vault-demo) - [Public Cloud](https://strategicgroup.net.au/public-cloud-computing/) - [Cyber Security](https://strategicgroup.net.au/cyber-security/) - [Security & Risk Audit](https://info.strategicgroup.net.au/cyber-security-audit) - [Staff Training](https://info.strategicgroup.net.au/email-security-training) - [Telecommunications](https://strategicgroup.net.au/unified-communications/) - [Unified Communications](https://strategicgroup.net.au/unified-communications/) - [Microsoft Teams Calling](https://strategicgroup.net.au/ms-teams-calling/) - [Strategy & Planning](https://info.strategicgroup.net.au/virtual-cio) - [IT Consulting](https://info.strategicgroup.net.au/virtual-cio) - [Business Continuity Planning](https://info.strategicgroup.net.au/business-continuity) - [Disaster Recovery Planning](https://strategicgroup.net.au/disaster-recovery/) - [Device as a Service](https://info.strategicgroup.net.au/strategic-group-device-as-a-service) - [IT Projects](https://strategicgroup.net.au/it-project-services/) - [On-site & Hybrid Servers](https://www.strategicgroup.net.au/on-site-servers/) - [Case Studies](https://strategicgroup.net.au/case-studies/) - [Insights](https://blog.strategicgroup.net.au/) - [Blog](https://blog.strategicgroup.net.au/) - [Resources](https://strategicgroup.net.au/resources/) - [Contact](https://strategicgroup.net.au/contact/) - [1300 857 048](tel:1300857048) ![Strategic Group Blog](https://blog.strategicgroup.net.au/hs-fs/hubfs/apple-computer-desk-96858.jpg?width=2000&name=apple-computer-desk-96858.jpg "Strategic Group Blog") # Strategic Group Blog #### Everything you need to know about IT and technology #### [News](https://blog.strategicgroup.net.au/topic/news) [Tips](https://blog.strategicgroup.net.au/topic/tips) [Security](https://blog.strategicgroup.net.au/topic/security) # [75% of employees pose a security risk to their business](https://blog.strategicgroup.net.au/75-of-employees-pose-a-security-risk-to-their-business) ![close](https://cdn2.hubspot.net/hubfs/2432204/AK-UI%20Builder/close-button.svg) ### Categories - [News (76)](https://blog.strategicgroup.net.au/topic/news) - [Tips (71)](https://blog.strategicgroup.net.au/topic/tips) - [Security (44)](https://blog.strategicgroup.net.au/topic/security) - [Productivity (13)](https://blog.strategicgroup.net.au/topic/productivity) - [Technology (7)](https://blog.strategicgroup.net.au/topic/technology) - [AI (5)](https://blog.strategicgroup.net.au/topic/ai) - [Community (2)](https://blog.strategicgroup.net.au/topic/community) - [Insider (1)](https://blog.strategicgroup.net.au/topic/insider) - [Uncategorised (1)](https://blog.strategicgroup.net.au/topic/uncategorised) ### Subscribe to Email Updates ### Popular Stories [The Essential 8 Guidelines for Business: What You Need to Know](https://blog.strategicgroup.net.au/the-essential-8-guidelines-for-business-what-you-need-to-know) Mar 18, 2025 [Embracing AI in the workplace in 2025](https://blog.strategicgroup.net.au/embracing-ai-in-the-workplace-in-2025) Mar 24, 2025 [Top tech gifts to buy this Christmas](https://blog.strategicgroup.net.au/top-tech-gifts-to-buy-this-christmas-0-1-0) Dec 11, 2024 [Social Engineering Red Flags - What to look out for](https://blog.strategicgroup.net.au/social-engineering-red-flags-what-to-look-out-for) Oct 21, 2022 [How much is IT costing your business?](https://blog.strategicgroup.net.au/how-much-is-it-costing-your-business) Jul 10, 2018 Categories | Subscribe | Populars - - - - Written by Emily Gam on October 22, 2018 With the threat of cyber-attacks on the rise, the introduction of the Mandatory Data Notification laws and the growing awareness of cyber security, you would think that people are getting better at identifying and preventing these attacks, right? *Wrong.* The State of Privacy and Security Awareness Report from security firm MediaPRO has found that **employees actually performed worse this year than in 2017 across all eight threat vectors that were measured.** Some of these include knowing how to spot a phishing email, identifying malware warning signs and general social media safety. The report found that Finance sector employees performed the worst out of all the industries measured with 85% of finance workers showing some lack of cyber security and data privacy knowledge. Also troubling is the fact that staff in management roles or above showed riskier behaviours than entry or mid-level employees. 77% of respondents in management showed a general lack of awareness of cyber security, while 74% scored the same in lower level positions. These numbers should be particularly troubling for businesses, given the sharp rise and sophistication of cyber-crime and the requirements for business under the [Mandatory Data Notification](https://blog.strategicgroup.net.au/mandatory-data-breach-notification-what-you-need-to-know) law. > We live in an age where stories about cyber security are constantly swirling, which can actually create a sense of security fatigue, but these levels of riskiness are alarming. It only takes one person to click on the wrong email that lets in the malware that infiltrates your company’s data. Without everybody being more vigilant, people and company data will continue to be at risk.” **Tom Pendergast, Chief Security & Privacy Strategist at MediaPRO.** How can you improve these numbers? #### **Create formal plan** A formal cyber security plan can be included in your overall IT or [Technology Strategy](https://blog.strategicgroup.net.au/5-reasons-you-need-a-technology-strategy). A formal, documented plan for cyber security will mean that staff have a process to follow if such an incident arises. Are your staff using outdated computers? Are all software patches up to date? Is new software compatible with your current hardware? These type of questions are ones that are addressed in technology or cyber security strategies, and allow you to see where there may be risks in your business. As part of your formal plan, it’s worthwhile including a [Disaster Recovery Plan](https://info.strategicgroup.net.au/disaster-recovery-plan-template) in the event that the worst case scenario does happen. #### **Train your staff** Users are the last line of defense in your business. It doesn’t matter how great your security software is or how much you spend, all it takes is one misplaced click on an email and your whole system can be compromised. Staff should be trained to pick out [red flags](https://blog.strategicgroup.net.au/social-engineering-red-flags-what-to-look-out-for) and the techniques that hackers use to encourage people to give up valuable information. #### **Phish your staff** This tip may sound counter intuitive but there are real benefits to testing your staff with different social engineering techniques. Regularly [sending simulated phishing emails](https://info.strategicgroup.net.au/phishing-security-test) to employees reinforces their security training and keeps them on their toes with security top of mind. Companies that have implemented white hat phishing and training have seen a significant drop in staff clicking on compromised emails. Cyber Security is becoming more important for both clients and businesses with clients expecting that their personal data is protected. Businesses now have a responsibility to make sure their client’s information is protected and reasonable steps are made to ensure it never falls into the wrong hands. [![Secure ](https://hubspot-no-cache-ap1-prod.s3.amazonaws.com/cta/default/1726473/dfc6e253-6a9c-46a9-b6b7-95292719cbec.png)](https://hubspot-cta-redirect-ap1-prod.s3.amazonaws.com/cta/redirect/1726473/dfc6e253-6a9c-46a9-b6b7-95292719cbec) ![Subscribe](https://cdn2.hubspot.net/hubfs/2432204/99%20Template%20Pack/Background%20Images/message.svg "Subscribe") ### Subscribe to Email Updates ### Let Us Know What You Thought about this Post. Put your Comment Below. ### You may also like: [News](https://blog.strategicgroup.net.au/topic/news) [Productivity](https://blog.strategicgroup.net.au/topic/productivity) [Technology](https://blog.strategicgroup.net.au/topic/technology) ## [Microsoft ends support for Windows 10](https://blog.strategicgroup.net.au/microsoft-ends-support-for-windows10) In a major shift for businesses worldwide, Microsoft has announced the end of support for Windows 10 devices, set for 14... [News](https://blog.strategicgroup.net.au/topic/news) [Productivity](https://blog.strategicgroup.net.au/topic/productivity) [Technology](https://blog.strategicgroup.net.au/topic/technology) ## [How to use Copilot prompts for buisness](https://blog.strategicgroup.net.au/how-to-use-copilot-prompts-for-business) When leveraging AI tools such as Microsoft Copilot, businesses often face challenges when learning how to enhance produc... [News](https://blog.strategicgroup.net.au/topic/news) [Productivity](https://blog.strategicgroup.net.au/topic/productivity) [Technology](https://blog.strategicgroup.net.au/topic/technology) ## [Top tech gifts to buy this Christmas](https://blog.strategicgroup.net.au/top-tech-gifts-to-buy-this-christmas-0-1-0) The holiday season is the perfect time to surprise loved ones with thoughtful gifts, and for the tech enthusiasts in you... ![](https://cdn2.hubspot.net/hub/2432204/hubfs/99%20Template%20Pack/newsletter_bg.jpeg?width=2000&name=newsletter_bg.jpeg) ## Get all updates straight to your inbox. Stay informed with the latest IT and Technology news. ### Subscribe to Email Updates [![Strategic Group](https://blog.strategicgroup.net.au/hs-fs/hubfs/Logos/SGRP_Final_Logo.jpg?width=700&name=SGRP_Final_Logo.jpg "Strategic Group")](https://www.strategicgroup.net.au) We wanted to be more than just a simple ‘break-fix’ IT provider, and become a true partner that understands our clients’ business drivers and goals so we can provide relevant IT solutions that enable our clients to grow & achieve their goals ##### SERVICES - Cloud Computing - [Helpdesk](https://www.strategicgroup.net.au/help-desk/) - IT Consulting ##### COMPANY - [About](https://strategicgroup.net.au/about/) - [Careers](https://strategicgroup.net.au/careers/) - [Case Studies](https://strategicgroup.net.au/case-studies/) ##### CONTACT Suite 5, 101 Hannell Street WICKHAM  NSW  2293 Phone: [1300 857 048](tel:1300857048) © 2018 All Rights Reserved