Cybercrime Prevention: Some People Can't Be Bothered With It

A new study tries to explain why perceived inconveniences apparently drives cybersecurity inaction.

Source: Shutterstock.

Fifty-five percent of consumers polled understand they need to protect personal data better; only 45% received formal workplace cybersecurity training; and 59% consider temporary advanced security measures inconveniences bothersome.

According to the “2019 Cybersecurity Awareness Insights Study” released by Brookfield, Wisc.-based financial technology provider Fiserv, most Americans consider themselves at least somewhat informed of cybersecurity threats, yet many fall short at proactively protecting their personal data.

Conducted in the summer of 2019 and originally commissioned by First Data, now Fiserv, the study gathered insights from 1,005 Americans ages 18 to 73. The study explored how aware American consumers are of online privacy and security risks, and how they behave when it comes to protecting themselves from cyberthreats.

“While cybercrime continues to grab headlines, our study shows that many Americans have not taken action to protect themselves, and the majority say they are bothered by temporary inconveniences brought about by advanced security measures,” Jay Ablian, head of merchant security and fraud solutions, Fiserv, said. “There is a clear opportunity for businesses to educate consumers and employees to help them understand both the potential impact of inaction and how security measures are designed to protect them.”

The report acknowledged the more consumers know, the better they’re able to protect their personal information online. According to study, 75% of consumers consider themselves at least somewhat informed of cybersecurity threats. In addition, 55% of respondents understand they should do more to beef up their online security – especially when using social media, online banking, or online shopping.

Despite this, more than half of consumers come across as ambivalent, in denial, or oblivious to cybersecurity risks, with only 6% currently taking steps needed to proactively protect themselves.

Perceived inconveniences apparently drives consumer inaction with about six out of ten consumers reporting they are bothered by temporary inconveniences brought about by advanced security measures that help ensure higher levels of protection.

Although many consumers consider extra cybersecurity precautions a hassle, they are taking some steps to protect themselves. According to the study, dodging inbound phishing attempts is a strong suit of consumers, but confess to needing additional vigilance around password security. The top measure consumers take to protect themselves is refusing to click email links or open attachments from people they don’t know, cited by 61% of consumers. On the other hand, changing passwords is a cybersecurity step 42% of consumers take only if they are required to

Of consumers surveyed, 33% have a go-to password they modify slightly to meet password requirements, and 20% use names of significant people, places or pets. Neither of these methods are a recommended best practice.

Consumers often look to their employer to provide cybersecurity training, but aren’t always getting the support they expect. Fifty-eight percent of consumers said their employer sends regular cybersecurity updates, and 45% said their employer offers formal cybersecurity training. Of consumers not receiving cybersecurity training, only 9% said their employer has a plan in place to do so.

Employers have a vested interest in cybersecurity awareness, as educated employees can secure their own information and that of the business.

Best practices for employers launching their own cybersecurity training include: