Study: Risky Online Behavior More Likely To Happen At Small Companies
Trend Micro recently reported that in the U.S., U.K., Germany and Japan, employees in small companies took more online risks while on the company network compared to their counterparts in larger organizations, according to the results of a study that explores corporate computer users' perceptions of and experiences with security threats.
The study, which surveyed usage habits of 1,600 corporate end users in the U.S., U.K., Germany and Japan, found that certain risky activities such as browsing Web sites unrelated to work, making online purchases, visiting social networking sites, downloading executable files and checking personal Web-based e-mail were more likely to take place in small businesses.
For example, 32 percent of small business employees in the U.K. have admitted to downloading executable files that can potentially lead to Trojan or virus attacks and, ultimately, identity and data theft. Checking personal e-mail is the most popular non-work related online activity for German workers -- 70 percent of small-business employees do this at work, compared to 59 percent of those in large companies. In Japan, the study revealed that most of the personal Internet activities stated above were more likely to occur in small businesses.
Despite a higher level of risky online behavior taking place, only about 50 percent or fewer end users within small companies said they had an IT department which may explain why spam, phishing and spyware were more commonly reported within these companies compared to larger ones.
The survey found that:
- In all countries surveyed, spam is more commonly reported among end users in smaller organizations: 82 percent of U.S. small business employees have reported spam; 80 percent in the U.K.; 83 percent in Germany; and 73 percent in Japan.
- In the UK, phishing is more commonly reported among end users in smaller organizations and the number of reported attacks has steadily increased since 2005. This year, 50 percent of small business end users reported attacks.
- In U.S. and Japan, spyware is more commonly reported among end users in smaller organizations. 36 percent of U.S. small business employees have reported spyware encounters (compared to 26 percent in large companies); in Japan, it was 17 percent for small companies and 10 percent for large ones.
In all countries surveyed, small organizations are less likely to have preventative policies in place than large companies. This probably explains why the survey found that small company end users in Japan are less aware of what type of company data is confidential compared to end users in larger Japanese organizations. Only 33 percent of small business end users said they were aware of what constitutes confidential company data compared to 46 percent from large companies. This held true for users in both the U.S. and the U.K. as well, but the disparity was less.