Report: Social Media a Top Cybersecurity Challenge in the Workplace

Safe social media use is the top cybersecurity challenge for employees, according to the latest report from Wombat Security Technologies on security awareness issues in enterprise organizations. The 2016 Beyond the Phish Report evaluated two years of assessment data from Wombat's Security Education Platform and surveyed hundreds of security professionals to find out how well end users are able to identify and manage security threats. The data came from a variety of sectors, including finance, technology, healthcare and education.

Overall, 31 percent of end users missed assessment questions related to using social media safely in the workplace. When the results were broken down by industry, education was among the top three sectors that struggle the most in the social media realm, missing 36 percent of assessment questions on safe social media use. The other two sectors with the least social media savvy: telecommunications (38 percent of questions missed) and retail (34 percent of questions missed).

After social media, the least understood cybersecurity topics across all industries were protecting and disposing of data securely (30 percent of questions missed); identifying phishing threats (28 percent of questions missed); protecting confidential information (27 percent of questions missed); and working safely outside the office (26 percent of questions missed).

The report linked the lack of understanding around common cybersecurity threats to the ever-growing problem of phishing. "Many of these risky behaviors exacerbate the phishing problem," Wombat President and CEO Joe Ferrara said in a statement. According to another Wombat study released back in January, phishing attacks have increased 13 percent since 2014. "To reduce cyber risk in organizations, security education programs must teach and assess end users across many topic areas, like oversharing on social media and proper data handling," said Ferrara.

Despite all the challenges, there are several areas of cybersecurity where employees are getting it right. The Wombat report highlighted the following categories where end users answered the highest percentage of assessment questions correctly:

  • Building safe passwords (90 percent of questions answered correctly);
  • Protecting against physical risks, such as ensuring no one follows you into a secure area or not leaving sensitive files on your desk (85 percent of questions answered correctly); and
  • Internet safety (84 percent of questions answered correctly).

The full Beyond the Phish Report can be downloaded free from the Wombat Security Technologies site (registration required).

About the Author

Rhea Kelly is editor in chief for Campus Technology, THE Journal, and Spaces4Learning. She can be reached at [email protected].

Featured

  • large cloud icon on the right in an abstract world above a polygon with a dark blue background

    Cloud Security Alliance Expands Agentic AI Governance Work

    The Cloud Security Alliance (CSA) has announced a series of CSAI Foundation milestones aimed at securing what it calls the agentic control plane, including a new catastrophic risk initiative, CVE Numbering Authority authorization, and the acquisition of two agentic AI specifications.

  • AI logo near computer equipment

    White House Issues National Policy Framework for AI

    The White House has released a four-page AI policy framework aimed at setting a national approach to AI, with priorities including child safety, intellectual property protections, truth and accuracy guardrails, and worker training for an AI-driven economy.

  • abstract representation of artificial intelligence with data streams and circuits

    Anthropic to Study Risks and Economic Effects of Advanced AI

    Anthropic has launched a new research effort focused on the biggest societal challenges posed by more powerful AI systems.

  • abstract glowing cube outlines

    Microsoft Positions Windows as a Platform for AI Agents

    The recent Microsoft Build 2026 developer conference highlighted a significant shift in the company's Windows strategy. Rather than presenting artificial intelligence as a collection of standalone features, Microsoft is increasingly positioning Windows as an operating environment for AI agents.