UK employees' risky habits pose serious cybersecurity risks

A new survey from Sharp UK has highlighted significant cybersecurity risks stemming from common practices among UK office workers.

The survey, which included responses from more than 1,000 employees in the United Kingdom, revealed that two-thirds of workers admit to engaging in behaviours that compromise cybersecurity, such as not logging out of accounts, using unsecured Wi-Fi, and downloading unauthorised software. This discovery is particularly alarming given that 86% of respondents expressed greater concern about cybersecurity than they did a year ago.

Conducted by Sharp Europe, the research disclosed that half of the office workers surveyed pointed to artificial intelligence as a primary factor driving increased cybersecurity concern. The survey data suggests a divide between employees' awareness of cybersecurity risks and their everyday actions, reflecting a broader trend across Europe.

Sharp's findings identified the top risky behaviours among office workers, which include failing to log out of work accounts, neglecting to update laptops, connecting devices to unsecured Wi-Fi networks, downloading unauthorised software, and sharing memes via WhatsApp with colleagues.

The risks are heightened towards the end of the work week, with nearly one-fifth (17%) of surveyed employees admitting to being more prone to making cybersecurity mistakes on Friday afternoons. Additionally, over a third (35%) attributed their susceptibility to such errors to stress from heavy workloads. Human error accounts for 95% of cybersecurity breaches according to the IBM Cost of a Data Breach Report 2024.

Despite their concerns, many employees do not feel personally responsible for their company's cybersecurity. Twenty-one percent of respondents indicated that they believe it is solely the IT department's responsibility to manage cybersecurity, and 5% claimed they would not be concerned if their company experienced a cyberattack.

Mark Williams, Chief Operating Officer at Sharp UK, stated, "Cybersecurity isn't just about protecting company data – it's about protecting the people behind that data. Our findings show that workers play a critical role in safeguarding company security, and businesses must empower them with the right tools, training and motivation to effectively reduce these risks."

Given the report's findings and the rising financial impact of data breaches – with global averages reaching USD $4.88 million in 2024 – companies are encouraged to enhance employee support systems to ensure cybersecurity remains a priority. Providing additional training and resources, particularly during high-pressure periods such as before weekends, could help mitigate risks.