--- title: "Studies: Tech Pros Say Employees Among Biggest Security Dangers" id: "21338" type: "post" slug: "studies-tech-pros-say-employees-among-biggest-security-dangers" published_at: "2014-01-23T19:21:00+00:00" modified_at: "2026-03-16T03:31:56+00:00" url: "https://associationsnow.com/2014/01/23/studies-tech-pros-say-employees-among-biggest-security-dangers/" markdown_url: "https://associationsnow.com/2014/01/23/studies-tech-pros-say-employees-among-biggest-security-dangers.md" excerpt: "A trio of new studies each touch upon elements of the same key point: Employees—even senior managers—remain one of the largest information security risks." taxonomy_category: - "Executive Leadership" taxonomy_post_tag: - "AssociationsNow" - "cybersecurity" - "employee security" - "Risk Management" - "Technology" taxonomy_content_format: - "Article" taxonomy_role: - "Director" - "Executive Team" - "Manager" - "VP" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » Studies: Tech Pros Say Employees Among Biggest Security Dangers ## Three new studies touch on elements of the same key point: Employees—even senior managers—remain one of the largest information security risks. You pick the right passwords. You limit access to VPNs and encrypt your association’s most sensitive data. But sometimes the biggest problem isn’t an outside threat but employees within the organization who may not be attuned to the nuances of security, according to three separate studies from different IT consultancies. Some highlights worth keeping in mind: **The carelessness factor:** The first study, from the U.K. technology firm SecureData, found that most of the 110 IT professionals surveyed [pointed to employee carelessness (opens in a new tab)](http://www.secdata.com/12-news/217-employees-revealed-as-greatest-challenge-to-it-security) as their biggest security risk (60 percent), far above common sources such as data theft (13 percent) and external malware (10 percent). Many of those polled (40 percent) said that educational efforts would help, but 25 percent raised organizational concerns that made it a challenge to implement a secure management policy. **Malware an issue:** Meanwhile, [a separate study by Osterman Research (opens in a new tab)](http://www.ihotdesk.co.uk/article/801680655/Employers-concerned-about-malware-brought-in-by-staff#axzz2qb4Nn3ZP) suggested that many IT professionals are worried about employees unwittingly installing malware. Roughly three-quarters (74 percent) of the 160 respondents said their networks have been compromised by a web-based piece of malware in the last year, with another 58 percent saying that mobile devices were targeted and 64 percent saying email was a major pain point. **Managers a problem, too:** Finally, a Stroz Friedberg study [pinpointed the senior management team (opens in a new tab)](http://www.strozfriedberg.com/wp-content/uploads/2014/01/Stroz-Friedberg_On-the-Pulse_Information-Security-in-American-Business.pdf) [PDF] as a source of security risks. “Senior management—those who often have high levels of access to valuable company information—admitted to partaking in risky behaviors most readily,” the study stated. “Personal technology preferences contributed to many of the transgressions.” Among the major manager missteps: 87 percent of those surveyed admitted to uploading work files to a personal email or cloud account; 58 percent have sent an email to the wrong person; and 51 percent have held onto proprietary company files after leaving a job. The problem is exacerbated by the rise of the bring your own device (BYOD) trend, according to the study. With user choice often running against the need for information security, how do you strike a balance? Let us know your take in the comments. (iStock/Thinkstock) [Ernie Smith](https://associationsnow.com/author/ernie-smith/) Ernie Smith is a former senior editor for Associations Now. [More articles by this author](https://associationsnow.com/author/ernie-smith/) Tags: [#cybersecurity](https://associationsnow.com/tag/cybersecurity/) [#employee security](https://associationsnow.com/tag/employee-security/) [#Risk Management](https://associationsnow.com/tag/risk-management/) [#Technology](https://associationsnow.com/tag/technology/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/) - [VideoInt. Society for the Study of Xenobiotics: ISSX Africa: Transforming Science, Connecting WorldsSeptember 24, 2026](https://associationsnow.com/2026/09/24/int-society-for-the-study-of-xenobiotics-issx-africa-transforming-science-connecting-worlds/) - [VideoAssociation for Financial Counseling and Planning EducationSeptember 24, 2026](https://associationsnow.com/2026/09/24/association-for-financial-counseling-and-planning-education/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2014%2F01%2F23%2Fstudies-tech-pros-say-employees-among-biggest-security-dangers%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !