IT software firm  Ivanti released its latest report on Securing the Digital Employee Experience, which details how companies can strike the right balance between securing the company and ensuring a positive digital employee experience (DEX).  

When employees encounter tech friction or feel frustrated with the tools they are asked to use, they will find a workaround.

In fact, one in two office workers admit to using personal devices to log into work networks, with 32% of them revealing their employers are unaware of this practice. Yet, just 13% of security professionals say user experience (UX) for end users is a mission-critical priority when adopting cybersecurity tech interventions.

By focusing on UX in security measures, organisations can minimise the likelihood of employees bypassing established protocols and resorting to unsafe workarounds. 

Ivanti surveyed over 20,000 IT professionals, executive leaders, office workers and security professionals around the world to understand what organisations are doing to enable positive digital employee experience (DEX) and any barriers organisations face to deliver frictionless experiences.

 The report found that when employees have unfettered access to genAI tools and other advanced technologies, it can introduce challenges with data privacy, compliance, cyber-risks, and copyrighted materials. Ivanti’s research shows that 81% of office workers report they have not been trained on genAI and 15% are using unsanctioned tools.  

Further, Ivanti found that Companies aren’t providing secure tools for in-office, remote and hybrid work. Whether half of your employees work remotely or just a small fraction do, there is still a profound need to ensure that the company supports all the ways employees work.

That report states that only 62% use a VPN or a zero-trust access solution to restrict network access and protect sensitive information, and only 57% use multi-factor authentication.  

Recommended reading

• Compromised Backups Increase Ransomware Costs 8X
• NCSC Warns Ransomware Threat to Rise with AI
• ISACA Report: Cybersecurity Teams Understaffed & Underfunded

Finally, security leaders are often excluded from DEX investment decisions. DEX-informed security minimises the need for employees to change their typical behaviors at work. Yet, only 38% of companies consult the CISO for input on DEX strategy, investments, and planning, despite the significant contributions DEX tools can make to security.  

“Although harmless in the moment, employees typically opt for convenience and put security on the back burner,” said Mike Riemer, field CISO, Ivanti.

He adds: “Companies should take steps to understand their employees’ workplace behaviors and adopt security measures that reduce the temptation for employees to sidestep protocols and use unsafe workarounds. Strong security shouldn’t come at the cost of user experience, as it is integral to maintaining both security and productivity.”