Organisational culture and behaviour change are crucial to underpin cyber security in organisations, according to Anna Collard, SVP of Content Strategy & Evangelist for KnowBe4 Africa., Collard said there was room for improvement in cyber security culture, and that organisations needed to focus on inspiring behavioural change within their ranks.found that cyber security culture is important to most respondents.
The definition of security culture remains a challenge, said Collard. "If our perceptions vary, it is very difficult to measure and monitor security culture.” Among those affected by cyber crime across Africa, 33% fell victim to social engineering, 13% had accounts hacked, and 11% reported viruses. In South Africa, 34% who were affected by cyber crime during the pandemic fell victim to phishing and 17% had accounts compromised. Investment scams, tender scams, online shopping scams, vishing and crypto accounts being stolen were also reported.
“Most of us are in the ideal zone in terms of attitude to cyber security culture – we support the policies and do the right things most of the time,” she said. “While most employees try to do the right thing in terms of cyber security, 15 – 20% of employees fall into the negligent zone, many are also in the reluctant zone, and less than 1% fall into the malicious zone,” she said.