{"id":74610,"date":"2024-10-22T00:06:20","date_gmt":"2024-10-22T04:06:20","guid":{"rendered":"https:\/\/world.edu\/?p=74610"},"modified":"2026-09-29T00:26:06","modified_gmt":"2026-09-29T04:26:06","slug":"human-error-is-the-weakest-link-in-the-cyber-security-chain-here-are-3-ways-to-fix-it","status":"publish","type":"post","link":"https:\/\/world.edu\/human-error-is-the-weakest-link-in-the-cyber-security-chain-here-are-3-ways-to-fix-it\/","title":{"rendered":"Human error is the weakest link in the cyber security chain. Here are 3 ways to fix it"},"content":{"rendered":"

\"\"<\/p>\n

Despite huge advances in cyber security, one weakness continues to overshadow all others: human error.<\/p>\n

Research<\/a>\u00a0has consistently shown human error is responsible for an overwhelming majority of successful cyber attacks. A\u00a0recent report<\/a>\u00a0puts the figure at 68%.<\/p>\n

No matter how advanced our technological defences become, the human element is likely to remain the weakest link in the cyber security chain. This weakness affects everyone using digital devices, yet traditional cyber education and awareness programs \u2013 and even\u00a0new, forward-looking laws<\/a>\u00a0\u2013 fail to adequately address it.<\/p>\n

So, how can we deal with human-centric cyber security related challenges?<\/p>\n

Understanding human error<\/strong><\/h4>\n

There are two types of human error in the context of cyber security.<\/p>\n

The first is skills-based errors. These occur when people are doing routine things \u2013 especially when their attention is diverted.<\/p>\n

For example, you might forget to back up desktop data from your computer. You know you should do it and know how to do it (because you have done it before). But because you need to get home early, forgot when you did it last or had lots of emails to respond to, you don\u2019t. This may make you more exposed to a hacker\u2019s demands in the event of a cyber attack, as there are no alternatives to retrieve the original data.<\/p>\n

The second type is knowledge-based errors. These occur when someone with less experience makes cyber security mistakes because they lack important knowledge or don\u2019t follow specific rules.<\/p>\n

For example, you might click on a link in an email from an unknown contact, even if you don\u2019t know what will happen. This could lead to you being hacked and losing your money and data, as the link might contain dangerous malware.<\/p>\n

Traditional approaches fall short<\/strong><\/h4>\n

Organisations and governments have invested heavily in cyber security education programs to address human error. However, these programs have had\u00a0mixed results at best<\/a>.<\/p>\n

This is partly because many programs take a technology-centric, one-size-fits-all approach<\/a>. They often focus on specific technical aspects, such as improving password hygiene or implementing\u00a0multi-factor authentication<\/a>. Yet, they don\u2019t address the underlying psychological and behavioural issues that influence people\u2019s actions.<\/p>\n

The reality is that changing human behaviour is far more complex than simply providing information or mandating certain practices. This is especially true in the context of cyber security.<\/p>\n

Public health campaigns such as the \u201cSlip, Slop, Slap\u201d sun safety initiative in Australia and New Zealand illustrate what works.<\/p>\n

Since this campaign started four decades ago, melanoma cases in both countries\u00a0have fallen significantly<\/a>. Behavioural change requires ongoing investment into promoting awareness.<\/p>\n

The same principle applies to cyber security education. Just because people know best practices doesn\u2019t mean they will consistently apply them \u2013 especially when faced with competing priorities or time pressures.<\/p>\n

New laws fall short<\/strong><\/h4>\n

The Australian government\u2019s proposed\u00a0cyber security law<\/a>\u00a0focuses on several key areas, including:<\/p>\n