A recent Kaspersky survey in the Middle East, Turkiye and Africa (META) region entitled “Cybersecurity in the workplace: Employee knowledge and behaviour”, found that just 46% of professionals surveyed in South Africa received training on digital threats.
This knowledge gap is significant, especially given that the majority of cybersecurity breaches are attributed to human error.
The findings underscore a need for IT departments to provide clear guidance and for organisations to implement structured, practical cybersecurity training that reaches employees at every level.
Many cyberattacks today are deliberately designed to bypass digital defences by exploiting human psychology.
“Social engineering” schemes, like phishing emails, manipulate trust and urgency to trick employees into sharing sensitive information or initiating fraudulent transactions.
Half of surveyed professionals in South Africa (50%) encountered scams disguised as messages from their organisation, colleagues or suppliers within the past year, while 7% suffered negative consequences after such deceptive communication.
Other cybersecurity issues closely linked to the human factor include compromised passwords, the leakage of sensitive data, unpatched IT systems and applications, unlocked and unencrypted devices.
Human-related cyberattacks can be prevented through appropriate education and awareness. 8% of local respondents acknowledged they made IT-related mistakes due to a lack of cybersecurity knowledge.
At the same time, training was named as the most effective means of raising cybersecurity awareness among non-IT employees: 63,5% of professionals surveyed in South Africa chose it over other options such treat stories (32%) and references to legal responsibility (33%).
These findings show that cybersecurity training is an essential layer of organisational defence.
When given the opportunity to choose specific training topics, respondents from South Africa said they would choose ones dedicated to protecting confidential work data (40%), websites and Internet security (38,3%), security of accounts and passwords (34,8%), e-mails (31,5%), secure remote work (27,3%), mobile devices (26,3%), safe use of social networks and messengers (19%), and safe use of neural network-based services such as chatbots (16,8%), while 41,5% would prefer to undergo all the above trainings, which highlights the broad demand for comprehensive cybersecurity education.
The data shows that employees are open to improving their cybersecurity skills.
“Cybersecurity should extend beyond the IT department. Every level of the organisation, including executives, must understand digital risks. Resilience comes from empowering employees to identify scams, avoid mistakes, and protect the data they handle,” says Chris Norton, GM for sub-Saharan Africa at Kaspersky.