While organizations are investing heavily in cybersecurity measures, data from the EY Human Risk in Cybersecurity Survey shines a light on the generational differences and the need for organizations to address the cybersecurity practices and behaviors of Gen Z and millennial workers, as they are least likely to prioritize or adhere to cybersecurity protocols.

There remains a significant awareness gap, among the younger generation of employees. Millennial and Gen Z workers demonstrate a more relaxed approach to cybersecurity on their work devices compared to their personal devices, as highlighted by the EY survey. That is not the only example where these digital natives differ from their peers.

The Awareness Gap:

According to the survey findings, roughly half of Gen Z, 48%, and about one-third of millennial employees, 39%, admit to taking cybersecurity protection on their personal devices more seriously than on their work devices. This disparity in attitude potentially puts companies at risk as employees may unknowingly expose sensitive information through their work devices.

48% admit to taking cybersecurity protection on their personal devices more seriously than on their work devices.

Gen Z and millennial workers exhibit a notably higher tendency, in comparison to older generations to use identical passwords for both their professional and personal accounts, as well as to overlook mandatory IT updates. This lax approach to password security and software updates creates vulnerabilities that cybercriminals can exploit.

Understanding the Digital Native Perspective:

Younger generations, such as Gen Z, have grown up in a digital world where technology and social media are deeply ingrained in their lives. While they may possess a high level of digital fluency, their cybersecurity awareness and practices do not necessarily align with their level of technical proficiency.

The EY survey reveals that despite considering themselves knowledgeable about cybersecurity (76% across all generations), younger generations are more likely to disregard mandatory IT updates (58% for Gen Z and 42% for millennials) and use the same password for different accounts (30% for Gen Z and 31% for millennials). This behavior highlights their lack of awareness regarding the potential risks and consequences.

Younger generations are also more likely to accept web browser cookies on their work-issued devices all the time or often (48% for Gen Z; 31% for millennials vs, 31% of Gen X and only 18% for baby boomers). This acceptance without caution exposes them to privacy breaches and allows for the gathering of personal information by malicious actors.

By understanding the digital native perspective and addressing their unique relationship with technology, organizations can cultivate a proactive cybersecurity culture and empower younger employees to become responsible digital citizens.

Building a Proactive Cybersecurity Culture:

To address the cybersecurity awareness gap among Gen Z and millennial workers, organizations need to take proactive measures. Technology executives must restructure their security strategies with human behavior at the core. Here are some steps to consider:

• Tailored Training Programs: One-size-fits-all cybersecurity training may not effectively resonate with Gen Z employees. Engaging Gen Z in interactive and gamified training sessions that leverage their affinity for technology and social media can enhance the effectiveness of cybersecurity training for this demographic.

• Emphasize Real-Life Consequences: Gen Z employees may not fully grasp the real-life consequences of cyber risks. Highlighting case studies and real-world examples that demonstrate the impact of cyberattacks on individuals, organizations, and society as a whole can bridge this awareness gap. By illustrating the potential damage caused by cyber threats, organizations can cultivate a greater sense of responsibility and urgency among Gen Z employees.

• Foster Cross-Generational Collaboration: Gen Z employees can benefit from the experience and insights of older generations. Encouraging intergenerational collaboration and knowledge sharing within the organization can bridge the awareness gap. Facilitating mentorship programs where more experienced employees can guide and mentor Gen Z employees in cybersecurity best practices promotes a cohesive cybersecurity culture.

• Encourage Active Participation: Gen Z employees are more likely to engage in cybersecurity initiatives when they feel actively involved. Encourage them to contribute ideas, suggestions, and feedback on cybersecurity practices and policies. By giving Gen Z a sense of ownership and agency, organizations can foster a culture of shared responsibility and continuous improvement.

Cultivating Awareness & Empowering the Next Generation:

In an age where cyber threats are continuously evolving, organizations cannot afford to overlook the cybersecurity awareness gap among their employees, especially the younger generation. By addressing this gap, organizations can strengthen their overall cybersecurity posture and minimize the risk of cyber incidents.

As technology continues to advance and the digital landscape evolves, it is imperative for technology leaders, and the C-Suite to prioritize human behavior as a crucial element in their cybersecurity strategy. Only by understanding and addressing the cybersecurity challenges specific to Gen Z and millennial generations can organizations create a proactive cybersecurity culture that educates, engages, and rewards employees at all levels. Empowering Gen Z and millennial employees to become responsible digital citizens both at work and in their personal lives.

Sources:

Ernst & Young LLP (EY US). (2022). 2022 EY Human Risk in Cybersecurity Survey.