CYBERSTATS

Security Intelligence

Zivver

Cybersecurity reports and statistics published by Zivver

0 categories1 reports

Research Reports

Reports and publications from Zivver

The Widening Disconnect Between Email Security and Risk Management

Recent Statistics & Reports

59% of employees say that they are worried that AI will make it harder for them to know if an incoming email or link is legitimate.

More than half of employees admit to making email mistakes at least once every few months, with 30% saying they make errors on an almost weekly basis

While IT leaders estimate that only 34% of outbound email incidents are formally reported, many employees handle mistakes informally—50% say they would notify the unintended recipient directly, while just 9% would report the incident to IT

38% of IT leaders say employees using unauthorised platforms is among the biggest security vulnerabilities in organizations

23% of IT leaders have email security training on inbound threats only

On average, an organization will experience 212 outbound email security incidents per month, yet only half (52%) of employees follow outbound email security policies to ensure compliance.

65% of IT leaders in the US admit that employee mistakes in outbound emails result in more significant data loss than malicious inbound attacks.

75% of IT leaders in the UK agree that outbound email security doesn’t get as much attention beyond compliance, but it is the silent security killer

66% of IT leaders in Belgium agree that outbound email security doesn’t get as much attention beyond compliance, but it is the silent security killer

IT leaders prioritize inbound threats like phishing, with 47% citing it as a top concern. However, two-thirds acknowledge that outbound breaches from human errors cause more data loss than social engineering attacks.

32% of leaders cite increased focus on risk mitigation as their motivation for change in their security focus

67% of IT leaders claim that email doesn’t get the security attention it deserves.

While 73% of employees are aware of the security policies pertaining to email, only 52% adhere to them

Advanced threat protection and malware detection (50%), employee training and awareness programs (48%), and phishing prevention (43%) are the top priorities for email security investment, according to IT leaders. These are followed by email encryption (42%), certified email authentication and access control (41%), human error prevention/data loss prevention (DLP) (39%), and post-delivery protection (24%).

While 47% of IT decision-makers identify phishing and malware as top threats to their data, only 20% prioritize outbound risks and just 39% of IT leaders point to data loss prevention/human error as an investment priority for email security

Among employees who frequently make email mistakes, 52% say they are not clear on their company's policy around email security

Averagely, 66% of IT leaders admit that employee mistakes in outbound emails result in more significant data loss than malicious inbound attacks.

67% of IT leaders claim that email doesn’t get the security attention it deserves.

54% of employees say that email accidents are most likely to happen when they are busy or tight on time, followed by feeling overwhelmed by too many messages or communication tools at 40%.

28% of employees say online training modules you complete at your own pace is the most engaging/effective email security training format

Showing 61-80 of 120 results

Top Categories