5 cybersecurity training program mistakes most companies make | TechTarget
Who's to blame for most security incidents? People -- that's the conclusion of multiple reports, surveys and studies.
"The evidence is overwhelming: Insider threats, credential misuse and user-driven errors account for most security incidents," wrote the authors of "The State of Human Risk 2026" report issued by cybersecurity platform Mimecast.
Other data provides more specific conclusions. Verizon's "2026 Data Breach Investigations Report," for example, pegged 62% of all data breaches to human missteps, such as errors, privilege misuse or social engineering.
And while most organizations have a cybersecurity awareness program in place to combat these vulnerabilities, those programs aren't nearly as effective as they could be.
The "SANS 2026 Security Awareness and Culture Report" found that only one-third of organizations maintain mature awareness programs. A mature program, according to SANS, drives long-term culture change or focuses on optimization and resilience, achieved by 21% and 12% of respondents, respectively. The other...
Copyright of this story solely belongs to www.techtarget.com. To see the full text click HERE
