KnowBe4’s Annual Phishing Benchmarking Report Shows Focusing on the Human Element Still the Best Safeguard Against Cyber Threats
KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, today released its new 2024 Phishing by Industry Benchmarking Report to measure an organization’s Phish-prone™ Percentage (PPP), which indicates how many of their employees are likely to fall for phishing or social engineering scams.
This year’s report shows that according to baseline testing conducted across all industries, without security awareness training, 34.3% of employees are likely to click on malicious links or comply with fraudulent requests. This is an increase of over one percent in comparison to the 2023 report and highlights the importance of building a strong security culture within organizations to mitigate the human risk that exists when safeguarding against cyber threats.
KnowBe4 analyzed over 54 million simulated phishing tests across more than 11.9 million users from 55,675 organizations in 19 different industries. The resulting baseline PPP measures the percentage of employees in organizations that had not conducted any KnowBe4 security training, who clicked a simulated phishing email link or opened an infected attachment during testing.
The report highlights a key fact: when simulated phishing security testing is integrated with security awareness training, it works. Organizations that commit to regular security awareness training and testing after the initial baseline test saw an average PPP drop to just 18.9% within 90 days. After 12 months of continuous training and testing, the PPP plummeted even further to 4.6%. These results show that to transform cybersecurity culture, existing habits first need to be broken to make way for more secure ones. As employees start to embrace new behaviors, they become habits, over time evolving into standard practices that shape organizational culture and, in turn, creating a workforce that instinctively makes security a priority in their day-to-day work.
Industries particularly vulnerable to cyber threats, scoring the highest PPP, and in dire need of security awareness training are also discussed in the report. The healthcare and pharmaceutical industry remains in the high-risk category with the highest PPP across small- and large-sized organizations scoring 34.7% and 51.4%, respectively. Across medium-sized organizations, the hospitality industry took top billing for the second time in three years with a score of 39.7%.
This report reinforces the crucial role the human element plays in cybersecurity. Although technology is important for preventing and recovering from cyberattacks, human error is still a big contributing factor to data breaches. In fact, according to Verizon's 2024 Data Breach Investigations report, 68% of data breaches were due to accidental actions, the use of stolen credentials, social engineering and malicious privilege misuse. Even though this is an improvement from last year’s 74%, organizations must continue to focus on strengthening the human firewall to safeguard against cyber threats.
An emerging threat vector highlighted in this year’s report is the rapid adoption of AI in certain industries which presents additional risks if not implemented with strong cybersecurity measures.
"The data does not lie; regular and focused security training reshapes how employees interact with potential threats. Our goals are to educate and change behaviors, for employees to instinctively put security first," says Stu Sjouwerman, CEO of KnowBe4. "Furthermore, we are seeing more sophisticated cyber threats emerge because of AI and the need for training is imperative.”
This year’s report also examines international phishing benchmarks from North America, South America, Europe, United Kingdom & Ireland, Africa, Asia, Australia and New Zealand.
To download a copy of the 2024 KnowBe4 Phishing by Industry Benchmarking Report, click here.
About KnowBe4
KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, is used by more than 65,000 organizations around the globe. Founded by IT and data security specialist Stu Sjouwerman, KnowBe4 helps organizations address the human element of security by raising awareness about ransomware, CEO fraud and other social engineering tactics through a new-school approach to awareness training on security. The late Kevin Mitnick, who was an internationally recognized cybersecurity specialist and KnowBe4’s Chief Hacking Officer, helped design the KnowBe4 training based on his well-documented social engineering tactics. Organizations rely on KnowBe4 to mobilize their end users as their last line of defense and trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20240604089157/en/
Contact information
For more information please contact:
Kathy Wattman at pr@knowbe4.com
727-474-9950
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Daiichi Sankyo Shines a Light on Inequalities and Unmet Needs in Care as Part of Its Commitment to People With Cardiovascular Disease31.8.2024 17:00:00 CEST | Press release
Daiichi Sankyo Europe, (hereafter, Daiichi Sankyo) today announced its reinforced commitment to addressing key unmet needs and barriers in cardiovascular (CV) care, by shining a light on inequalities in treatment and outcomes experienced by various patient groups. The announcement follows the presentation of data from sub-analyses of the SANTORINI observational study and ETNA-AF (Edoxaban Treatment in routiNe clinical prActice in patients with nonvalvular Atrial Fibrillation) study programme, at the European Society of Cardiology (ESC) Congress 2024. Gender inequalities in CV disease treatment and LDL-C goal attainment Raised low-density lipoprotein cholesterol (LDL-C) is a key modifiable contributor to risk of cardiovascular major events. It has been shown that for every 1 mmol/L reduction in LDL-C, there is a 22% reduction in major cardiovascular events after 1 year.7,8 Female patients in Europe who are at high or very high CV risk were undertreated and less achieved guideline-recomm
Suzano completes purchase of 15% stake in Lenzing AG31.8.2024 00:40:00 CEST | Press release
Suzano, the world's largest pulp producer, today announces the completion of its acquisition of a 15% stake in Lenzing AG, the Vienna-listed leading global supplier of sustainable premium cellulosic fibres for the textile and non-wovens industry, from B&C Group. As announced in June this year, the transaction value is EUR 230 million (or EUR 39.70 per share). The agreement was subject to regulatory approval, which was granted without restrictions. The long-term partnership between Suzano and B&C Group establishes that Suzano has the right to hold two seats on Lenzing’s Board and the option to acquire an additional 15% stake from B&C Group until the end of 2028. Following the sale of the 15% stake, B&C Group now holds 37.25% of Lenzing’s share capital. Lenzing is a leading global supplier of premium wood-based cellulosic fibers (lyocell, modal, and viscose) for the production of clothing, home textiles, hygiene products, and non-woven materials. Beto Abreu, CEO of Suzano, said: “Lenzing
Ant International Collaborates with Brazilian Partners to Drive Financial Inclusion with Innovative Credit Tech Solutions30.8.2024 20:46:00 CEST | Press release
Ant International, a digital payment and financial technology leader, today announced its strategic initiative to provide AI-driven credit technology solutions designed to empower local partners and advance financial inclusions in Brazil. As a major milestone, Ant International has formed a strategic partnership with Dock, a leader in payments and banking technology in Latin America. This collaboration aims to enhance the credit management capability and infrastructure efficiency for Dock’s clients, which include financial institutions, retailers, fintech start-ups, etc. The shared vision is to make credit services more inclusive for market segments that are currently insufficiently served, such as micro, small and medium-sized enterprises (MSMEs). In the initial phase of the collaboration, Ant International’s AI-driven credit tech solutions, including an automated and intelligent risk management engine, will be explored for integration into Dock One platform. This initiative aims to s
Wipro Appoints Srikumar Rao as Global Head of Its Engineering Edge Business Line30.8.2024 16:20:00 CEST | Press release
Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO), a leading technology services and consulting company, today announced the appointment of Srikumar Rao as Global Head of its Engineering Edge Business Line, effective from October 5, 2024. Srikumar succeeds Harmeet Chauhan, who is stepping down to pursue opportunities outside the organization. Srikumar will report to Srini Pallia. Srikumar has been with Wipro for 26 years and has grown with the organization, serving in various leadership roles. He was most recently the Chief Operating Officer (COO) of Wipro Engineering Edge (WEE) and Global Practice Head of Embedded Systems. His work has spanned several markets, selling and delivering specialized Engineering, Research, and Development (ER&D) services to Software & Internet, Semiconductor, Automotive, Manufacturing, and Communications clients. In his new role, Srikumar will continue to scale and strengthen Wipro’s engineering prowess. He will also be responsible for defining the vision
Alnylam Presents Detailed Results from the Positive HELIOS-B Phase 3 Study of Vutrisiran▼ in Patients with ATTR Amyloidosis with Cardiomyopathy at the European Society of Cardiology Congress30.8.2024 12:00:00 CEST | Press release
Alnylam Pharmaceuticals, Inc. (Nasdaq: ALNY), the leading RNAi therapeutics company, today announced detailed results from the HELIOS-B Phase 3 study of vutrisiran, an investigational RNAi therapeutic in development for the treatment of ATTR amyloidosis with cardiomyopathy (ATTR-CM). The data were presented today in a Hot Line session at the European Society of Cardiology (ESC) Congress 2024, taking place August 30-September 2 in London, United Kingdom. Results from the HELIOS-B study were also simultaneously published in TheNew England Journal of Medicine. As previously reported, the HELIOS-B study met all 10 of its primary and secondary endpoints, across both the overall and monotherapy populations, with statistical significance. Enrolled patients were predominantly New York Heart Association (NYHA) Class I or II with wild-type disease and had been diagnosed by non-invasive methods, with substantial concurrent treatment with available standard of care treatments such as tafamidis and
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom