CTOs say human error, not hackers, is top cybersecurity threat

March 5, 2024
1 min read


TLDR: Key Points

  • Human error is identified as the top cybersecurity threat by CTOs, surpassing ransomware and phishing attacks.
  • CTOs are implementing strategies like multi-factor authentication, identity access management, and security information and event management to address human error.

In today’s digital landscape, the threat of cyberattacks looms large, with organizations facing increasingly sophisticated threats. A survey conducted by STX Next revealed that 59% of CTOs identified human error as the most significant cybersecurity risk within their organizations. This includes actions like inadvertently downloading malware-infected attachments or neglecting to use strong passwords.

To address this concern, CTOs are implementing strategies like multi-factor authentication, identity access management, and security information and event management technology. However, the survey also highlighted vulnerabilities, with only 49% of companies reporting having a cyber insurance policy in place and a minority of companies having dedicated security teams.

Krzysztof Olejniczak, Chief Information Security Officer at STX Next, emphasized the importance of employee awareness and preparedness in mitigating cyber risks. He stressed the need for educating employees on identifying and responding to threats, as well as implementing solutions like multi-factor authentication as standard practices.

Olejniczak also highlighted the disparity in cybersecurity resources among organizations, especially smaller firms with limited resources. He suggested leveraging specialized cybersecurity solutions or providers to address this gap. In conclusion, organizations must prioritize cybersecurity preparedness and resilience to protect themselves from cyber threats.


Latest from Blog

EU push for unified incident report rules

TLDR: The Federation of European Risk Management Associations (FERMA) is urging the EU to harmonize cyber incident reporting requirements ahead of new legislation. Upcoming legislation such as the NIS2 Directive, DORA, and