Cybersecurity is no longer just a technology issue, it’s a human psychology issue. In fact, research from IBM states that 95%* of breaches can be traced back to human error rather than a technical flaw.
While organizations continue to invest in systems, policies, and technical safeguards, their security also depends on the everyday decisions people make.
So, what influences whether employees act securely? And why doesn’t knowing the risks always translate into safer behaviours?
Drawing on research with 296 participants across 33 countries, this report explores the human factors behind cybersecurity behaviours. It examines how personal risk perception, confidence, and workplace conditions shape the choices people make, revealing why awareness alone isn’t enough to change behaviour.
The findings highlight the important role of managers and organizational culture in creating an environment where people feel confident to ask questions, report mistakes, and raise concerns. As cyber threats evolve and AI introduces new challenges, organizations need to move beyond traditional awareness training towards practical, continuous skills development. This should focus on building confidence, reinforcing positive habits, and helping people make better decisions.
*IBM 2015 Cyber Security Intelligence Index.
Meet our researchers
Dr Anastasia Voronkova
Insights Analyst
Ana is a mixed-methods researcher specializing in social and environmental psychology. She has deep knowledge of practical research and advanced analytics.
Dr Anna Barnett
Head of Insights
As a Chartered Psychologist with a strong background in academic research, Anna specializes in skills measurement and evaluation.