Copyright 2009 Trend Micro Inc. Classification 9/9/2015 1 2010 Corporate End User Study Employee Online Behavior

Copyright 2009 Trend Micro Inc.Classification 04/19/23 1

2010 Corporate End User Study

Employee Online Behavior

Copyright 2009 Trend Micro Inc.

Methodology

• 1,600 surveys in total, 400 corporate computer end-users were surveyed online per country in four countries: U.S., Japan, Germany and U.K, during March 2010.

• Qualification Criteria:– Full-time employed, with e-mail and Internet access at work– Use computers over 5 hours per week at work

• Quotas were set by size and type of computer as follows:– 25% (n=100) large company, use desktop or workstation most often– 25% (n=100) large company, use a laptop or notebook most often– 25% (n=100) smaller company, use desktop or workstation most often– 25% (n=100) smaller company, use a laptop or notebook most often

• In the US, UK and Germany, the split between large and smaller company was made at 500 employees. In Japan, the split was made at 250 employees.


Send Info by IMby Type of Connection

28%

23%

42%

49%

18%

19%

24%

28%

0% 20% 40% 60% 80%

US

UK

Germany

Japan

Mobile Laptop Users Always via Company Network

Send Info by Web Mailby Type of Connection

45%

53%

64%

71%

34%

38%

44%

48%

0% 20% 40% 60% 80%

US

UK

Germany

Japan

Use of Electronic Communication for Confidential Info

• Regardless of country, laptop users who can connect to the Internet outside of company network are more likely to share confidential information via Instant Messenger, Web Mail and Social Media Applications than those who are always connected to a company’s network. This is significantly so for each application in Germany and Japan.

Q: About how often have you sent out company confidential information to a colleague or business partner via instant messenger or via web mail (web based mail application)? A: Ever Done. indicate significantly significant differences between mobile users and those always connected to company network. (z-test/t-test at 95% confidence interval).* All desktop users and laptop users who only access the Internet through a company LAN

Send Info by Social Media

by Type of Connection

17%

23%

30%

36%

15%

16%

17%

17%

0% 20% 40% 60% 80%

US

UK

Germany

Japan


Send Info by Web Mail, IM or Social Media Applications by Type of Connection

60%

47%

55%

68%

78%

44%

35%

38%

48%

52%

0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%

All Countries

US

UK

Germany

Japan

Mobile Laptop Users

Always via CompanyNetwork*

Use of Electronic Communication for Confidential Info – Continued

• Across all countries, 60% of the mobile workers vs. 44% of the stationary workers admitted to having sent out company confidential information via IM, web mail or social media applications. This is most significantly so in Germany and Japan.

Q: About how often have you sent out company confidential information to a colleague or business partner via instant messenger or via web mail (web based mail application)? A: Ever Done. indicate significantly significant differences between mobile users and those always connected to company network. (z-test/t-test at 95% confidence interval).* All desktop users and laptop users who only access the Internet through a company LAN


Have you ever leaked company data…?

3.2%

5.3%

2.5%

1.8%

2.2%

1.5%

2.2%

1.3%

0.0%

1.0%

2.0%

3.0%

4.0%

5.0%

6.0%

US UK Germany Japan

Accidently Intentionally

Leakage of Company Confidential Data - Self• Overall 5% of end users admitted to having leaked company confidential information

outside of company.

• End users in the US and UK are more likely to admit to having leaked confidential company data than end users in Japan.

Q: Have you ever accidentally/intentionally leaked company confidential or proprietary information outside of company? Q: Do you believe other employee have leaked company confidential or proprietary information outside of company? indicate significantly significant differences between countries on left chart or between small and large companies within countries. (z-test/t-test at 95% confidence interval).

Have you ever leaked out company confidential data?

6%

7%

5%

3%

0.0%

1.0%

2.0%

3.0%

4.0%

5.0%

6.0%

7.0%

8.0%

US UK Germany Japan


Knowledge of Company Data

• End users in Japan are the least likely to indicate knowing what type of company data is confidential compared to their counterparts in the US or Europe.

Do you Know What Company Data is Confidential and Proprietary?

65%68%

63%

37%

0%

10%

20%

30%

40%

50%

60%

70%

80%

US UK Germany Japan

Q: Do you know what type of company data is confidential and proprietary? indicate statistically significant differences between countries. (z-test/t-test at 95% confidence interval).


Activities Done While On Network: US• In the US, laptop end users are far more likely to perform non-work related activities

while on their company’s network than desktop users. This is likely driven by their ability to work outside of a main office.

Q: Which of the following activities have you done while connected to the Internet through your company’s network? indicate significantly significant differences between size brackets or between desktop and laptop users within countries. (z-test/t-test at 95% confidence interval).

By Size of Company66%

46%

37%

31%

27%

26%

23%

18%

10%

4%

2%

66%

56%

40%

28%

21%

36%

20%

19%

7%

5%

4%

0% 20% 40% 60% 80%

Checked personal e-mail

Browsed web sites not directlyrelated to your job

Do personal online banking or billpaying

Watched / listened to streamingaudio and/or video

Visited social networking sites

Made a non business relatedonline purchase

Downloaded executable files

Used instant messaging

Downloaded music or movies

Made VOIP calls

Participated in online gambling orgaming

Small

Large

By Type of Computer

58%

45%

33%

25%

16%

26%

15%

15%

4%

3%

2%

74%

58%

45%

33%

32%

36%

28%

21%

13%

5%

4%

0% 20% 40% 60% 80%

Checked personal e-mail

Browsed web sites not directlyrelated to your job

Do personal online banking or billpaying

Watched / listened to streamingaudio and/or video

Visited social networking sites

Made a non business relatedonline purchase

Downloaded executable files

Used instant messaging

Downloaded music or movies

Made VOIP calls

Participated in online gamblingor gaming

Desktop

Laptop


Fears or Concerns about Phishing

• Identify theft, violation of privacy and loss of personal information are among the top concerns regarding phishing for each country.

• End users in the US and Germany are significantly more likely to have a wide variety of concerns regarding phishing than those in the UK and Japan.

Q: What are your fears or concerns about….Phishing? Base: Users aware of threat. indicate statistically significant differences between countries. (z-test/t-test at 95% confidence interval).

Country US UK Germany Japan

Sample size, n= 322 337 329 349

Identity theft 57% 51% 48% 50%

Violation of my privacy 54% 42% 43% 28%

Loss of personal information 48% 45% 42% 32%

Waste of my time 46% 28% 41% 20%

Violation of corporate IT security policy 42% 27% 35% 22%

Increased risk of legal liability 39% 24% 30% 16%

Lower computer performance 39% 15% 16% 11%

Damage to corporate reputation 35% 21% 29% 16%

Loss of corporate information 34% 28% 35% 19%

Loss of connection bandwidth 31% 7% 13% 6%

IT tightly monitoring my Web activities 27% 15% 25% 21%

Malicious download 26% 17% 19% 18%


Fears or Concerns about Spyware• Similar to phishing concerns, violation of privacy, identity theft and loss of

personal information are among the top concerns regarding spyware for each country, along with lower computer performance.

• End users in Japan are the least likely to express concerns regarding spyware.

Q: What are your fears or concerns about…Spyware? Base: Users aware of threat. indicate statistically significant differences between countries. (z-test/t-test at 95% confidence interval).


Sample size, n= 352 358 345 352














Fears or Concerns about Viruses

• Malicious downloads and lower computer performance emerge among the top concerns regarding viruses for each country.

• US and German end users were significantly more likely to have wide concerns about viruses overall.

Q: What are your fears or concerns about…Viruses? Base: Users aware of threat. indicate statistically significant differences between countries. (z-test/t-test at 95% confidence interval).


Sample size, n= 327 342 363 331














Fears or Concerns about Trojans

• Similar to viruses, malicious downloads and lower computer performance were cited often as concerns regarding Trojans.

• Again similar to viruses, end users in the US and Germany were the most likely to have wide concerns about Trojan threats.

Q: What are your fears or concerns about…Trojans? Base: Users aware of threat. indicate statistically significant differences between countries. (z-test/t-test at 95% confidence interval).


Sample size, n= 327 342 363 331














Fears or Concerns about Data Stealing Malware• Not surprisingly, the largest concerns regarding data stealing malware include loss

of personal and corporate information.

• Overall though, concerns were significantly lower in Japan than other countries.

Q: What are your fears or concerns about…Data Stealing Malware? Base: Users aware of threat. indicate statistically significant differences between countries. (z-test/t-test at 95% confidence interval).


Sample size, n= 212 188 272 211














Fears or Concerns about Spam• Spam concerns primarily center around wasted time, significantly so

among end users in the UK and Germany. This is more distantly followed by lower computer performance.

Q: What are your fears or concerns about…Spam? Base: Users aware of threat. indicate statistically significant differences between countries. (z-test/t-test at 95% confidence interval).


Sample size, n= 355 358 360 341














Overriding Company Security

• Roughly 1 in 10 end users in each country admitted to an attempt to override their company’s security to access certain websites.

• Overall, close to half who try to override their company’s security do so often or very often.

Q. Have you ever tried to override your company’s security so you can access a certain Web site? Q. How often do you try to override your company’s security so you can access a certain Web site? Base: Respondents who override company security. indicate significantly significant differences between countries . (z-test/t-test at 95% confidence interval).

Have you ever tried to override your company's security?

8%

11%12%

8%

0%

2%

4%

6%

8%

10%

12%

14%

US UK Germany Japan

Frequency Of Overriding Security(All countries, n=106)

25%

18%

36%

21%

0% 10% 20% 30% 40%

Very often (morethan once a

week)

Often (a fewtimes per month)

Somewhat(occasionally

throughout theyear)

Rarely(intermittent

use)

Copyright 2009 Trend Micro Inc.Classification 04/19/23 15

Documents

Copyright 2009 Trend Micro Inc. Classification 9/9/2015 1 2010 Corporate End User Study Employee Online Behavior