https://www.channelfutures.com/wp-content/themes/channelfutures_child/assets/images/logo/footer-new-logo.png
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • 2022 MSP 501 Rankings
    • 2022 NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2022 Editorial Calendar
  • Awards
    • Back
    • 2022 MSP 501
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Channel Partners 101 (CP 101)
  • Events
    • Back
    • CP Conference & Expo
    • MSP Summit
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
Channel Futures
  • NEWSLETTER
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • 2022 MSP 501 Rankings
    • 2022 NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2022 Editorial Calendar
  • Awards
    • Back
    • 2022 MSP 501
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Channel Partners 101 (CP 101)
  • Events
    • Back
    • CP Conference & Expo
    • MSP Summit
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
    • Newsletter
  • REGISTER
  • MSPs
  • VARs / SIs
  • Agents
  • Cloud Service Providers
  • Channel Partners Events
 Channel Futures

Channel Research


Shutterstock

Research

KnowBe4: All Industries Need to Improve Security Culture

  • Written by Edward Gately
  • August 18, 2020
Education is the most disappointing sector when it comes to security culture.

A new report by KnowBe4 Research shows all industries need better a security culture to avoid being targeted by cybercriminals.

It’s the first “Security Culture Report” from KnowBe4’s new research arm. The company collected data from 120,050 employees in more than 1,100 organizations across 24 countries.

In all, it examined 17 industry sectors. The results reveal a large gap between the best performers and the poor performers.

The top performers were from banking, financial services and insurance. The worst were from education, transportation, and energy and utilities.

KnowBe4 research scored all industries according to seven dimensions: attitudes, behaviors, cognition, communication, compliance, norms and responsibilities.

Education Sector Disappoints

Perry Carpenter is KnowBe4‘s chief evangelist and strategy officer. He heads the new research division.

KnowBe4's Perry Carpenter

KnowBe4’s Perry Carpenter

“I was dismayed at how much the education sector struggles in all measurement areas,” he said. “The data indicates that there are systemic security culture issues in this sector. This would be bad during years when there are no other external pressures. However, all of the uncertainty related to education in the era of COVID-19 will exacerbate the problem.”

These issues related to security culture in education will likely result in some “very public and messy incidents,” Carpenter said.

“This is a critical time for the education sector to step up and put intentional focus on strengthening their security culture,” he said. “Otherwise, the rapid technology adoption they are being pushed into as a result of COVID-19 will create a security culture crisis.”

Keep up with resources for supporting partners and customers during the COVID-19 crisis.

The data shows no industry, even the highest scoring ones, should be overly pleased with their scores, Carpenter said.

“We see that one of the main reasons for this overall lackluster performance is that there is a general fuzziness in how organizations understand security culture,” he said. “We see that organizations know that culture is important, but they don’t really know what it is. And because they don’t know what it is, they have a difficult time creating actionable plans for improvement.”

Strong Correlation with Security Risk

The research shows a strong correlation between low security culture scores and high security risk, Carpenter said.

“In other words, organizations that struggle with security culture are going to be softer targets for attackers,” he said. “So attackers will be successful against poor performers more often and it is likely that attacks will result in larger, more devastating incidents.”

The primary vector that attackers leverage is usually social engineering to trick end users, Carpenter said.

“Resilience to social engineering relates to the security culture dimensions of behavior and cognition,” he said. “Good security behaviors can be codified into habits, building a healthy security hygiene. And similarly, employees can be taught and conditioned to approach situations with a more secure mindset. Organizations that ignore these dimensions of security culture do so at their own peril.”

The technology sector’s scores were OK, but not in a good way, Carpenter said.

“For instance, the tech sector claimed the top score in the cognition dimension,” he said. “However, that was still only a 73 (moderate). In fact, most of the technology sector scores were in the moderate range. But we need to keep in mind that moderate is not good. The range for good is 80 to 89. The sector’s overall security culture score was only a 75.”

That means many of the organizations trusted with the most sensitive data might be struggling to foster a security culture to safeguard that data, Carpenter said.

The report and survey can “really step in and make a difference,” he said.

“By breaking this amorphous concept into seven distinct and measurable dimensions, we are able to provide organizations with what they need — clarity,” Carpenter said. “The clarity to identify gaps and determine how best to chart a path toward improvement.”

Tags: MSPs VARs/SIs Best Practices Business Models Channel Research Security Specialty Practices Strategy

Most Recent


  • Making Waves
    7 Channel People Making Waves This Week at Verizon, Brightspeed, Okta, Nutanix, More
    CCaaS market revenue will grow by a record 216% by 2027, according to which organization?
  • New Chapter
    The Gately Report: SonicWall Partners to Play Big Role in Company's Next Chapter
    Meantime, a financially motivated threat actor is increasingly targeting hospitality, hotel and travel organizations.
  • Ladder going to sky
    Cisco Taking Partners of All Types to 'New Heights'
    From MSPs to agents, enterprise to SMB, Cisco previews its appearance at the MSP Summit.
  • add
    Kaseya-Datto: Channel Exec Talks MSP Benefits from Acquisition
    It'll be a hot topic at the upcoming MSP Summit.

Leave a comment Cancel reply

-or-

Log in with your Channel Futures account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • IPO
    6 Things to Know About the Upcoming SentinelOne IPO
  • Acquisition fish eating little fish
    Deloitte Joins Cloud Cybersecurity Craze with CloudQuest Purchase
  • edge computing
    'Challenging Results' for MSPs in Channel Futures' Exclusive Quarterly Survey
  • Security shield on digital background
    VMware Security Connect Focused on Redefining Security, Increasing Threats

Upcoming Events

View all

MSP Summit

September 13, 2022 - September 16, 2022

Channel Partners Conference & Expo

May 1, 2023 - May 4, 2023

Galleries

View all

7 Channel People Making Waves This Week at Verizon, Brightspeed, Okta, Nutanix, More

August 19, 2022

The Gately Report: SonicWall Partners to Play Big Role in Company’s Next Chapter

August 19, 2022

As Artificial Intelligence Advances, Is Human Error Holding Up the Contact Center?

August 19, 2022

Industry Perspectives

View all

How to Take Shared Responsibility for Securing Cloud

August 11, 2022

Seize the Application Modernization Opportunity

August 2, 2022

A Growth Mindset: Your Organization’s Strategic Differentiator

August 1, 2022

Webinars

View all

Outsmarting RaaS: Implementation Strategies To Help Your Clients Before, During, and After a Ransomware Attack

August 23, 2022

Why it is Important to Upgrade Aging Servers and How to use Live Optics to Upgrade Efficiently

August 25, 2022

Executives at Home are Not Alright: An Intro to Digital Executive Protection

September 8, 2022

White Papers

View all

Work Goes Remote – (and Other Top ITOps Trends)

May 25, 2022

The New Bottom Line: How MSPs Can Meet the Healthcare Crisis While Evolving Their Businesses

April 19, 2022

How to build a Security Operations Center (on a budget)

April 4, 2022

Channel Futures TV

View all

ThreatLocker Preaches Zero Trust, Addresses Industry Competition

Cisco Taking Partners of All Types to ‘New Heights’

August 19, 2022

Kaseya-Datto: Channel Exec Talks MSP Benefits from Acquisition

August 19, 2022

RingCentral Partner Revenue Growth Hits Highs in 2022

August 19, 2022

Twitter

ChannelFutures

.@RingCentral's Wendy Harmon explains why partners have reason to celebrate this year. @MSP_Summit… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

Channel development manager Jason Pryce of @datto on @KaseyaCorp's acquisition, security push and more. @MSP_Summit… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

.@FrontierCorp workers on #strike in California for subcontracting. @CWAUnion dlvr.it/SWwXhh https://t.co/c8QQZyBaq5

August 19, 2022
ChannelFutures

.@MichelleRagusa of @CiscoPartners gets us ready for @MSP_Summit by talking #SMB, security and more. #MSPSummit… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

.@IGIcyber sidles up to @meetgradient to bring ease of use and added value to MSPs. dlvr.it/SWwRSG https://t.co/vLFDPfAyQ1

August 19, 2022
ChannelFutures

Now Available: Expo Pass to Channel Partners Leadership Summit & #MSPSummit this September 13-16! Take a look at th… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

How do you stay on top of your game? 💪 By connecting & sharing knowledge with other elite partners, ready to stay r… twitter.com/i/web/status/1…

August 19, 2022
ChannelFutures

How do you stay on top of your game? 💪 By connecting & sharing knowledge with other elite partners, ready to stay r… twitter.com/i/web/status/1…

August 19, 2022

MSP 501

The industry's largest and most comprehensive partner awards program.

Newsletters and Updates

Sign up for The Channel Report, Channel Futures Update, MSP 501 Newsletter and more.

Live Channel Events

Get the latest information on the next industry-leading Channel Partners event.

Galleries

Educational slide shows and images from live events.

Media Kit And Advertising

Want to reach our audience? Access our media kit.

DISCOVER MORE FROM INFORMA TECH

  • Channel Partners Events
  • Telecoms.com
  • MSP 501
  • Black Hat
  • IoT World Today
  • Omdia

WORKING WITH US

  • Contact
  • About Us
  • Advertise
  • Newsletter

FOLLOW Channel Futures ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2022 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X