New study reveals the number of employees bypassing basic security measures in the workplace

workplace
Image credit: Unsplash

According to the UK Government, 1 in 2 UK businesses reported experiencing a cyber security breach or attack in the past 12 months[1]. Yet, despite extensive investment in data protection software some vulnerabilities lie beyond their control, as research has previously suggested that over 95% of data breaches are caused by human error[2].

In a new survey of 1,000 Gen Z employees, card payment provider, Dojo, found that the majority of respondents don’t follow security measures at work. The survey revealed that over half (57%) of Gen Z fail to keep work passwords private.

Uncovering 15 important data protection practices, Naveed Islam, CISO (Chief Information Security Officer) at Dojo shares expert advice on how to protect and prevent your business from falling victim to privacy breaches at the hands of human error.

Three-quarters of Brits fail to keep work information under wraps

Rank

Security measure

Percentage of adhering respondents

1

Taking work calls in private

17%

2

Always using your key fob

20%

2

Downloading files only with IT approval

20%

2

Limiting phone use during work hours (except lunchtime)

20%

5

Setting meetings to private when necessary

22%

6

Keeping work-related information private

25%

7

Viewing your boss’s calendar only when necessary

26%

8

Using work devices only for work-related activities

28%

9

Not sharing on social media during work hours

29%

9

Not using WhatsApp on work laptops/ computers

29%

11

Avoiding personal social media on work devices

34%

12

Locking your laptop/ computer when leaving the room

36%

13

Refraining from posting about work on social media

38%

14

Avoiding suspicious or unverified emails

40%

15

Keeping passwords private

43%

83% of employees do not take work calls in private

According to Dojo’s research, just 17% of employees would only take work calls in private, meaning 83% are answering calls in public spaces. While the rise of remote working has made it easier to work from virtually anywhere, taking public calls can pose privacy and confidentiality risks. Employees might unintentionally disclose sensitive information by conducting work conversations in public settings.

Just 25% of employees keep work information private

The data reveals that three-quarters of employees fail to keep work-related information private, increasing the risk of data breaches. Additionally, the research found that over half (57%) of employers would not pass an employee’s probation if they were caught sharing classified information with external sources. Depending on the nature of the information shared, this could mean that up to 75% of employed Brits are putting their jobs at risk.

80% of employees admit they do not always use their key fob

Key fobs are crucial for maintaining security in shared workspaces, but only 20% of employees report always using theirs. This means the majority of Brits are not adhering to building security guidelines, potentially compromising the safety of others sharing the building.

How to protect your business from human error privacy breaches

Naveed Islam, CISO at Dojo comments: “Many workplaces implement technologies and processes designed to protect their sensitive information. Yet, our study reiterates that there is still work to be done in educating staff, highlighting the importance of making employees aware of company security policies – such as taking work related phone calls in private and refraining from sharing private work information with friends – both of which work towards ensuring information is prevented from unintentionally falling into the wrong hands. This can be enforced by carrying out regular, comprehensive training and being clear about the expectations of your business and the risks of data breaches.”

[1] https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2024/cyber-security-breaches-survey-2024

[2] 2023 study: https://www.beyondencryption.com/blog/data-security-an-analysis-of-the-latest-ico-findings