--- title: "The Cybersecurity Awareness Gap Doesn’t Look Like You’d Expect" id: "48451" type: "post" slug: "the-cybersecurity-awareness-gap-doesnt-look-like-youd-expect" published_at: "2019-10-29T21:54:37+00:00" modified_at: "2026-03-17T02:25:04+00:00" url: "https://associationsnow.com/2019/10/29/the-cybersecurity-awareness-gap-doesnt-look-like-youd-expect/" markdown_url: "https://associationsnow.com/2019/10/29/the-cybersecurity-awareness-gap-doesnt-look-like-youd-expect.md" excerpt: "Don't assume your younger employees are the most tuned in to cybersecurity. A new study finds that many workers under 30 don't fully appreciate the risks and may see security practices as impediments to productivity." taxonomy_category: - "Learning" taxonomy_post_tag: - "AssociationsNow" - "cybersecurity" - "digital security" - "Employee Training" - "Technology" taxonomy_content_format: - "Article" taxonomy_role: - "Director" - "Executive Team" - "Manager" - "VP" taxonomy_persona: - "Association Professionals" --- [Home](https://associationsnow.com/) » [Articles](https://associationsnow.com/format/article/) » The Cybersecurity Awareness Gap Doesn’t Look Like You’d Expect Younger employees have been working with technology all their lives, so they should be savvy about cybersecurity, right? Not necessarily, according to a recent study from NTT, a global technology services and telecom firm based in Japan. That finding has implications for organizations, including associations, that store and handle lots of institutional information, member and customer data, and sensitive financial records in digital form. In “[Meeting the Expectations of a New Generation (opens in a new tab)](https://hello.global.ntt/en-us/insights/risk-value-report) ” [registration], which summarizes NTT research, the firm reports that employees under age 30 have “profoundly different attitudes towards cybersecurity,” emphasizing flexibility and productivity. Older employees have a stronger handle on cybersecurity practices—particularly in Norway and Sweden, the United Kingdom, and the United States. (Overall, the most cyber-savvy nation is France, where [a government program (opens in a new tab)](https://www.enisa.europa.eu/topics/national-cyber-security-strategies/ncss-map/national-cyber-security-strategies-interactive-map/strategies/information-systems-defence-and-security-frances-strategy) raised awareness of cybersecurity issues among students who are now in the workforce.) So why are older employees often better at cybersecurity? Simply put, they’ve been around the block more often. “It would be easy to assume that—due to their inherent digital DNA—under 30s always demonstrate good cybersecurity practice,” the report notes. “However, this is not always the case: On average, the 30–60 year-old age group exhibits more cybersecurity good practice than the under 30s. This is due to a greater acquisition of workplace knowledge and skills over time.” The report notes that younger employees often underestimate the impact of cyberattacks and how long they can take to recover from. “Under 30s believe that their organizations’ recovery from a security incident would be six days quicker than those in older age groups,” the report states. “Successful incident response requires detailed planning and strong stakeholder communication. Time to recover is often underestimated by those unfamiliar with incident response and cybersecurity threats.” In addition, workers under 30 are 39 percent more likely to pay ransom to a cybercriminal. The report suggests that solving this problem requires employers to ensure that good security practices don’t get in the way of young workers’ productivity. “If we want to harness the fantastic creativity and energy of younger workers, we need to think about security as something that enables their work, not something that blocks them from achieving their tasks,” noted Adam Joinson, a professor of information systems at the University of Bath, in commentary on the study. (yacobchuk/iStock/Getty Images Plus) [Ernie Smith](https://associationsnow.com/author/ernie-smith/) Ernie Smith is a former senior editor for Associations Now. [More articles by this author](https://associationsnow.com/author/ernie-smith/) Tags: [#cybersecurity](https://associationsnow.com/tag/cybersecurity/) [#digital security](https://associationsnow.com/tag/digital-security/) [#Employee Training](https://associationsnow.com/tag/employee-training/) [#Technology](https://associationsnow.com/tag/technology/) **Stay Informed** [Subscribe to our free newsletter](https://associationsnow.com/newsletter/) , *Associations Now Daily News*, to find out what’s happening in the association world every business day. ## You Might Like - [PodcastSecuring Identity: What Associations Need to Know About Verifiable CredentialsJune 25, 2025](https://associationsnow.com/2025/06/25/securing-identity-what-associations-need-to-know-about-verifiable-credentials/) - [VideoWelcome to ASAE AcademyMarch 19, 2025](https://associationsnow.com/2025/03/19/welcome-to-asae-academy/) - [PodcastAssociations Now Presents: Beyond the Tech Stack: How AI Is Changing the Association PlaybookOctober 29, 2026](https://associationsnow.com/2026/10/29/associations-now-presents-beyond-the-tech-stack-how-ai-is-changing-the-association-playbook/) - [VideoAmerican College of Emergency Physicians: ACEP Geriatric Emergency Department Accreditation ProgramSeptember 24, 2026](https://associationsnow.com/2026/09/24/american-college-of-emergency-physicians-acep-geriatric-emergency-department-accreditation-program/) ## Comments **Comments are for ASAE members.** [Learn more about comments on this site.](https://associationsnow.com/comments/) [Log in](https://associationsnow.com/login?redirect_to=https%3A%2F%2Fassociationsnow.com%2F2019%2F10%2F29%2Fthe-cybersecurity-awareness-gap-doesnt-look-like-youd-expect%2F%23comments) to your member account or [join ASAE](https://my.asaecenter.org/select-a-membership-type/) !