2016 STATE OF PRIVACY ANDSECURITY AWARENESS REPORT88% of Employees Lack the Basic Awareness to Stop

Preventable Privacy or Security Incidents

These individuals put their organizations at serious risk for a privacy or security incident. Such incidents can mean big trouble for an organization, including loss of consumer trust, financial and reputation damages, and more.

RISK

16%

Novices have a good understanding of the basics, but could stand to learn more. They should remember that even one wrong decision or mistake can lead to a security and/or privacy incident.

NOVICE

72%

These individuals know their stuff, including how to identify and properly dispose of personal information, recognize phishing attempts and malware, and keep information safe while working remotely.

HERO

12%

RISK 0 - 23 00.0% - 74.2%

SURVEY SCORE RANGE PERCENT RANGE

NOVICE 24 - 28 77.4% - 90.3%

SURVEY SCORE RANGE PERCENT RANGE

HERO 29 - 31 93.5% - 100%

SURVEY SCORE RANGE PERCENT RANGE

PRIVACY & SECURITY AWARENESS IQ SURVEY KEY FINDINGS

We invite you to take the survey yourself, benchmark against your peers, and figure out which risk areas may be a cause for concern.

READ ON TO LEARN MORE:

ONLY 12% OF EMPLOYEES HAVE A HIGH ENOUGH AWARENESS IQTO AVOID PREVENTABLE PRIVACY OR SECURITY INCIDENTS.

Organizations face numerous threats that compromise the security of critical information. And when risky behavior goes unchecked, many employees continue to unintentionally put their organizations' sensitive data at risk.

This survey was conducted by MediaPro to formulate a baselinePrivacy & Security Awareness IQ for organizations assessingtheir risk profiles.

?We surveyed nearly 1,000 employees, testing their know-how across eight security and privacy scenarios. What follows are

the key takeaways along with a few best practices.

These figures represent the percentage of survey respondents who showedrisky behaviors in each of the eight risk areas.

Overall, the average survey respondent achieved a NOVICE score,which still leaves organizations vulnerable to threats.

26%INCIDENT REPORTING

20%WORKING REMOTELY

19%ACCESS CONTROLS

19%IDENTIFYING PERSONAL INFORMATION

18%IDENTIFYING MALWARE WARNING SIGNS

15%CLOUD COMPUTING

14%SOCIAL MEDIA

13%IDENTIFYING PHISHING ATTEMPTS

AWARENESS OF EMPLOYEES IN 8 RISK AREAS

39%chose to discard a potential password hint in an unsecured

trash bin.

Passwords and password hints should be kept under lock and key and disposed of by shredding, or some other secure means.

BEST PRACTICE

TAKEAWAY

25%failed to recognize a sample

phishing email with a questionable “from” address and an attachment.

Only emails from trustworthy sources should be opened. Any emails with an attachment should be given extra scrutiny.

BEST PRACTICE

TAKEAWAY

thought it was acceptable to use a personal USB drive to transfer work

documents when working remotely.

Most companies do not allow employees to usea personal flash drive (personal portable mediaor even a personalcloud drive) to storebusiness information. Such information should

only be stored on secure and approved work devices.

BEST PRACTICE

TAKEAWAY

30%thought it was acceptable to post on behalf of their company, even to a personal social media account.

Posting about company matters on social media could lead to reputational damage and canbe in violation of an organization's code ofconduct. Always abide byan organization’s internalpolicipolicies when it comesto posting aboutcompany matterson social media.

BEST PRACTICE

TAKEAWAY

KEY TAKEAWAYS AND BEST PRACTICES

https://www.mediapro.com/awareness-iq

TAKE THE SURVEY NOW!

All responses are 100% anonymous.

WHAT'S YOUR PRIVACY & SECURITY AWARENESS IQ?