LAKE FOREST, IL., June 20, 2018 - With one-third of working adults in the U.S. admitting to potentially risky behavior at work, employee negligence poses major security concerns for U.S. businesses. That is according to Shred-it's State of the Industry Report, which exposes information and data security risks currently threatening U.S. enterprises and small businesses and includes survey findings from the Shred-it Security Tracker, conducted by Ipsos.
When assessing the cause of data breaches, the report found that employee negligence or accidental loss is a main cause. Nearly half of C-Suite Executives (C-Suites) (47 percent) and Small Business Owners (SBOs) (42 percent) reported that human error or accidental loss by an employee was the cause of a data breach. Additionally, one in four C-Suites (28 percent) and one in five SBOs (17 percent) reported human error or accidental loss by an external vendor caused their organization to suffer a data breach.
“The study’s findings clearly show that seemingly small habits can pose great security risk and add up to large financial, reputational and legal risks,” said Monu Kalsi, Vice President, Shred-it. “For companies looking to better protect their data, smart information security begins with giving employees access to smart information security practices and training. Through consistent training and education, businesses of all sizes can take back ownership of information security and create a more security-minded work culture among their employees.”
The study also found that 78 percent of C-Suites and just over one in four (28 percent) SBOs plan to train their staff on information-security procedures and policies over the next year. Additional findings from the report expose high risk areas and activities businesses should consider examining, including:
Off-site and remote work habits: When employees work remotely or off-site, businesses believe the odds of a data breach occurring are higher.
Physical document security: From loosely stored confidential notes on a desk to the theft of paper documents while working off-site, U.S. employees create vulnerable paper trails.
Device use: Bad employee habits are bad news for businesses, as U.S. workers are losing computers and mobile devices and/or leaving them vulnerable to theft.
To learn more about the 2018 Security Tracker and to receive additional findings, download the 2018 Shred-it State of the Industry Report.
Shred-it is a world-leading information security company providing information destruction services that ensure the security and integrity of our clients' private information. Shred-it, a Stericycle solution, operates in 170 markets throughout 19 countries worldwide, servicing more than 400,000 global, national and local businesses. For more information, please visit www.shredit.com.
Ipsos ranks third in the global research industry. With a strong presence in 87 countries, Ipsos employs more than 16,000 people and has the ability to conduct research programs in more than 100 countries. Founded in France in 1975, Ipsos is controlled and managed by research professionals. They have built a solid Group around a multi-specialist positioning – Media and advertising research; Marketing research; Client and employee relationship management; Opinion & social research; Mobile, Online, Offline data collection and delivery.
Ipsos is listed on Eurolist - NYSE-Euronext. The company is part of the SBF 120 and the Mid-60 index and is eligible for the Deferred Settlement Service (SRD). www.ipsos.com.
About the 2018 Security Tracker Study
Ipsos conducted a quantitative online survey of Small Business Owners (SBO) in the United States (n=1,003), maximum 100 employees and C-Suite Executives in the United States (n=101). C-Suite executives work for companies with a minimum of 500 employees in the United States. Data for Small Business Owners is weighted by region. Data for C-Suite Executives is unweighted as the population is unknown. The precision of Ipsos online surveys is calculated via a credibility interval. In this case, the U.S. SBO sample is considered accurate to within +/- 3.5 percentage points had all U.S. small business owners been surveyed, and the U.S. C-Suite sample is accurate to within +/- 11.1 percentage points had all U.S. C-Suite executives been surveyed. The fieldwork was conducted between April 3rd and April 21st, 2018.
In addition to the quantitative online survey, Ipsos conducted a short omnibus survey among a gen pop sample of n=1,002 Americans about data protection and security.