Arctic Wolf 2024 Human Risk Behavior Snapshot Reveals Nearly Two-Thirds of Security and IT Leaders Have Fallen for Phishing Attacks

Poor password hygiene runs rampant with 68% of IT leaders and end users admitting to reusing system passwords

 | Source: Arctic Wolf Networks, Inc Arctic Wolf Networks, Inc

EDEN PRAIRIE, Minn., Oct. 16, 2024 (GLOBE NEWSWIRE) -- Arctic Wolf®, a global leader in security operations, today published findings from its 2024 Human Risk Behavior Snapshot based on a global survey the company commissioned with Sapio Research of more than 1,500 senior IT and security decision-makers and end- users from over sixteen different countries.

As modern threat actors gain access to increasingly more sophisticated AI tools, employees play an even more critical role in their organizations cyber defenses. The 2024 Arctic Wolf Human Risk Behavior Snapshot aims to provide business leaders and security practitioners with a better understanding of the people practices and behaviors in their organizations in a post gen-AI world and offer insight into common human risk elements.

Key findings from the report include:

  • Consequences for Human-Related Security Failures are Steep: 27% of IT leaders have witnessed an employee termination for falling victim to a scam.
  • IT Leaders Prove to be Delinquent in Security Practices: More than a third (36%) of IT leaders have disabled security measures on their system.
  • Overconfidence Rings True for IT Professionals: 80% of IT leaders are confident their organization won’t fall for a phishing attack, despite the fact that 64% have clicked on phishing links themselves.
  • Password Reuse is Still a Significant Challenge: 68% of IT and cybersecurity leaders admit to reusing system passwords.
  • AI Policies Still in Early Adoption: 60% of IT leaders say their organization has an AI policy—but less than a third (29%) of end users are aware of it.

“Protecting against the human element is a concern security practitioners have held as a top priority for years – and the data in the 2024 Arctic Wolf Human Risk Behavior Snapshot proves both leaders and end users still have a lot of work to ensure that they as individuals aren’t adversely impacting the overall security of their organizations,” said Adam Marre, chief information security officer, Arctic Wolf. “Cybersecurity isn't just about technology—it’s about people. As threat actors grow more sophisticated, security leaders must move beyond traditional security training methods and adopt a comprehensive human risk management strategy that will not only help them to better identify and mitigate threats, but more importantly foster a more proactive and security-conscious workforce.”

Security awareness training has historically been a core pillar of security operations, but traditional training solutions that operate on an annual cadence and offer a "check the box" approach to compliance are wildly ineffective, leaving employees unengaged and uninformed about the latest attacks targeting them. This snapshot report reveals how important it is for IT and security leaders to embrace the concept of human risk management within their organizations and explores how solutions such as Arctic Wolf Managed Security Awareness can help create a security culture instead of a culture of blame.

For additional insights from Arctic Wolf’s Human Risk Behavior Snapshot, visit arcticwolf.com to download the full report and register for the 2024 Cybersecurity Awareness Month Summit by region below:

Additional Resources:

About Arctic Wolf:
Arctic Wolf® is a global leader in security operations, enabling customers to manage their cyber risk in the face of modern cyber-attacks via a premier cloud-native security operations platform. The Arctic Wolf Security Operations Cloud ingests and analyzes more than 5.5 trillion security events a week to help enable cyber defense at an unprecedented capacity and scale, empowering customers of virtually any size across a wide range of industries to feel confident in their security posture, readiness, and long-term resilience. By delivering automated threat protection, response, and remediation capabilities, Arctic Wolf delivers world-class security operations with the push of a button so customers can defend their greatest assets at the speed of data.

Press Contact:
Lauren Back
pr@arcticwolf.com

© 2024 Arctic Wolf Networks, Inc., All Rights Reserved. Arctic Wolf, Arctic Wolf Platform, Arctic Wolf Security Operations Cloud, Arctic Wolf Managed Detection and Response, Arctic Wolf Managed Risk, Arctic Wolf Managed Security Awareness, Arctic Wolf Incident Response, and Arctic Wolf Concierge Security Team are either trademarks or registered trademarks of Arctic Wolf Networks, Inc. or Arctic Wolf Networks Canada, Inc. and any subsidiaries in Canada, the United States, and/or other countries.