Over 6% of IT decision makers in businesses refuse to build security culture: report

Majority do not know what it means.

Whilst cybersecurity and data protection are most needed in businesses, a KnowBe4 report showed that less than 10% of businesses’ IT decision makers reject the idea of a security culture despite knowing what it is.

KnowBe4, a security awareness training provider, showed that 14% of IT decision makers said they know the term and is needed but don’t know how they can implement it. Less than two in ten IT decision makers said they don’t have one in place whilst 4% said it is someone else’s responsibility.

Five in 10 office workers have no knowledge about security culture. For IT decision makers, 85% are aware of it but only seven in 10 know what it means.

KnowBe4 said it defines security culture as  “ideas, customs and social behaviours that influence business' security.”

“A common definition makes it possible to discuss the same thing, in the same way. We all know that if you do not measure something, that something does not exist,” it added. 

Asking help

When needing help from IT professionals, almost 23% are reluctant to ask their IT team for security concerns. One in six said it is a hassle so they rarely ask questions whilst 5% fear there will be consequences and 8% said they are embarrassed about it.

Gen Zs (21%) said they are most likely reluctant to ask IT questions compared to Millennials (7%), Gen X (5 percent) and Baby Boomers (7 percent).