People are not doing enough to ensure they stay safe online, according to the UK government, who has today launched a new £4 million campaign to help raise awareness of cyber security issues.
Some facts and figures:
- 94% of people surveyed see it as their personal responsibility to ensure a safer internet experience.
But…
- Just 44% always install security software on new equipment
- Only 37% download updates and patches for personal computers when prompted – and just 21% do on mobile devices.
- 30% use complex passwords to protect online accounts, and
- 57% don’t always check websites are secure before making a purchase.
The Be Cyber Streetwise campaign aims to help raise awareness of cyber security, change the way people view and approach online safety, and provide tools and tricks through the Cyber Streetwise website to help everyone stay safer online.
The initiative is helping to educate people on how to:
- Use strong, memorable passwords
- Install anti-virus software on new devices
- Check privacy settings on social media
- Shop safely online by always ensuring to check online retail sites are secure
- Download software and application patches when prompted
Sophos is helping to support Cyber Streetwise with content and advice on the Cyber Streetwise website, as well as a range of tools and tips to help educate people on its own site.
There’s even a ‘Threat hunter’ game to help you spot the threats that might be lying around on your desk.
Image of cyber thief courtesy of Shutterstock.
It’s time to start deflecting the risk and costs associated with poor security practices back at the end user. As long as companies are willing to absorb the costs (which ultimately are passed along to all consumers, diligent and non-diligent), then end users will remain lazy.
To be fair to users…sometimes they do everything right but still come up short because someone to whom they entrusted their data (e.g. Neiman Marcus, Adobe, Target) did the wrong thing on an epic scale.
As we wrote recently, Dutch banks want to hold users accountable for getting security right in online banking:
http://nakedsecurity.sophos.com/2013/12/02/dutch-banks-set-common-rules-for-online-banking
But as we wrote even more recently, quite a few banks are providing their users with official online mobile banking software that gets security wrong:
http://nakedsecurity.sophos.com/2014/01/10/just-how-secure-is-that-mobile-banking-app
Horns of a dilemma, eh?
How do the figures for unprotected / inadequately protected PCs in this article (generated by a survey) compare with those collected on a routine basis by GCHQ?