Security culture: organisations struggle as cybersecurity training fails to prevent human errors

Despite increased spending on cybersecurity training, human error-related breaches continue to rise, prompting questions about effectiveness.

Human error remains a leading cause of cybersecurity breaches, despite advancements in technology and decades of security awareness training.

From leaked passwords to phishing scams, individuals continue to make mistakes that put organisations at risk. This ongoing challenge raises concerns about the effectiveness of traditional training methods. In this episode of Ticker Clicks, cyber security expert Jacqueline Jayne examines the history of security training and why it often fails to protect individuals and organisations from evolving cyber threats. As cybercriminals refine their tactics, training strategies must adapt to keep pace with new risks.

Many individuals underestimate online threats, lacking a comprehensive understanding of cybersecurity principles. Without effective education, they are more likely to fall victim to attacks. To combat this, organisations must continually update their training programmes to address emerging threats and reinforce safe online behaviour.

Cybersecurity is not just a technical issue—it is also a matter of human behaviour and decision-making. Recognising the role of human factors in security can lead to more effective strategies that reduce breaches caused by human error. Ultimately, fostering a culture of security awareness is key to strengthening defences in the digital age.