OH, BEHAVE! 2024-2025
The Annual Cybersecurity Attitudes and Behaviors Report
We surveyed over 7000 people to reveal how behaviors and attitudes shape security risk.
Top takeaways
53%
of participants are always connected online.
38%
share sensitive work information with AI without their employer’s knowledge.
23%
of people don’t complete security awareness training because they, “already know enough”.
44%
of people report staying safe online is intimidating.
53%
of participants are always connected online.
38%
share sensitive work information with AI without their employer’s knowledge.
23%
of people don’t complete security awareness training because they, “already know enough”.
44%
of people report staying safe online is intimidating.
Key resources
Executive summary
Explore report highlights, including key findings on GenAI use and security awareness training.
Oh, Behave! 2024/25
The full fat version. A veritable ocean of BS* for perusing at your own pace.
* Behavioral science
Infographic
The really important stats, at a glance, to help protect your organization.
Report summary
How much do people worry about online safety? And, more to the point, do their concerns align with how they behave?
Who’s most likely to spill secrets to AI, and who’s avoiding security training like it’s trying to sell them a timeshare?
Maybe you’ve pondered the biggest question of all: Exactly how does all of this impact cybersecurity risk?
CybSafe teamed up with the National Cybersecurity Alliance to create The Annual Cybersecurity Attitudes and Behaviors Report 2024-2025, or as it’s known round here, Oh, Behave! It’s the result of digging deep into the online behaviors and beliefs of thousands of people across the globe.
The 2024/25 report is crammed with insights you can’t afford to miss. It reveals hidden patterns, fascinating trends, and provides actionable recommendations to help you protect your organization.
Don’t miss out on
Oh, Behave! 2024/25
This report covers:
How employees use, and share information with, GenAI tools
How workforces around the globe perceive and react to security awareness activities
How organizations, policy makers, and practitioners can better encourage secure user behavior
This report is for:
Security awareness & Human risk management professionals
CISOs, CTOs, and CIOs
IT Directors, IT Managers, and Data protection officers
Anyone tasked with running Security awareness or Human risk management programs
Authors
Expert contributors
Dr Suzie Dobrontei
Behavioral Scientist, CybSafe
Suzie is a chartered social psychologist, tech enthusiast, former university lecturer, and CybSafe Behavioral Scientist.
She’s researched and taught social processes, group dynamics and human factors in cyber security for eight years.
Suzie is the lead author for The Annual Cybersecurity Attitudes and Behaviors Report 2024 – 2025.
Dr Jason Nurse
Director of Science and Research, CybSafe
Jason is the Director of Science & Research at CybSafe, and an Associate Professor in Cyber Security at the University of Kent.
At CybSafe, Dr Nurse leads a team of behavioral scientists and researchers responsible for ensuring that the company’s product is grounded in scientific evidence and empowers users to make smarter security decisions and build better habits.
Lisa Plaggemier
Executive Director, The National Cybersecurity Alliance
Lisa Plaggemier is Executive Director at the National Cybersecurity Alliance. She is a recognized thought leader in security awareness and education with a track record of engaging and empowering people to protect themselves, their families, and their organizations.
Lisa has worked as an international marketer with Ford Motor Company, Director of Security Culture, Risk and Client Advocacy for CDK Global, Chief Evangelist at InfoSec, and Chief Strategy and Marketing Officer at MediaPRO.
Oz Alashe MBE
CEO & Founder, CybSafe
Oz leads CybSafe. He has been the driving force behind CybSafe – the concept, vision and platform.
A former UK Special Forces Lieutenant Colonel, Oz is focused on making society more secure by helping organizations address the human aspect of cyber security.
CybSafe is the human risk management platform designed to reduce human cyber risk in the modern, remote, and hybrid work environment, by measuring and influencing specific security behaviors.
CybSafe is powered by SebDB—the world’s most comprehensive security behaviors database—and built by the industry’s largest in-house team of psychologists, behavioral scientists, analysts, and security experts. An award-winning, fully scalable, and customizable solution, it’s the smart choice for any organization.
- 91% Reduction in high-risk phishing behavior
- 55% Improvement in security behaviors
- 4x More likely to engage in cybersecurity initiatives
A leading non-profit organization, the National Cybersecurity Alliance (NCA) is dedicated to creating a more secure, interconnected world.Advocating for the safe use of all technology, the NCA aims to educate everyone on how best to protect themselves, their families, and their organizations from cybercrime.
The organization also creates strong partnerships between governments and corporations to foster a greater “digital” good, and amplify the message that only together can we realize a more secure, interconnected world.