KnowBe4 report highlights impact of workplace training

KnowBe4 has released a new research report detailing how workplace training influences the consumption and sharing of cybersecurity information among employees, highlighting the importance of cultivating a robust organisational security culture.

"Employees care about cybersecurity—and organizations should, too," said Dr. Martin J. Kraemer, Security Awareness Advocate at KnowBe4. He emphasised that successful security awareness programmes are those that engage employees to actively share insights, thereby strengthening workplace security culture. Kraemer noted that providing high-quality and relevant content that is easy to share aids organisations in fostering a security-first mindset.

The report, titled "Cybersecurity Information Sharing as an Element of Sustainable Security Culture", was authored by Dr. Kraemer and Dr. William Seymour, Lecturer in Cybersecurity at King's College London. It examines the behaviours of employees regarding cybersecurity information, including how they consume and share it.

The findings reveal that 95% of employees have engaged with cybersecurity-related content at least once. Furthermore, 77% of individuals have had cybersecurity information shared with them, while 25% have actively shared such information with others.

Workplace training emerged as a significant factor influencing this behaviour. On average, 57% of those surveyed received cybersecurity-related training, with proportions differing markedly by region—73% in the UK, 60% in the U.S., 55% in Germany, and 38% in France. Those who had undergone training were found to be more likely to share insights with colleagues and retain phishing-related content.

In the survey, 22% of employees identified websites as a source of cybersecurity information, while 21% cited their employers as such a resource. The report noted that employers serve as a critical source of cybersecurity information across all age groups. However, social media was specifically noted as an influential channel for those aged 18 to 29.

The study emphasises that a well-established security culture fosters good cybersecurity habits, mutual support among colleagues, and heightened awareness of risks. Understanding the flow of cybersecurity information can provide valuable insights for organisations looking to enhance their defences and minimise human risk.

Kraemer added, "By delivering high-quality, relevant content and making it easy to share, organizations can empower their workforce to make informed decisions, reduce risks, and create a security-first mindset that extends beyond the office." This, he suggests, underscores the power of engaged employees in contributing to a more resilient organisational cybersecurity structure.