This is according to KnowBe4, a provider of security awareness training and simulated phishing platforms, which unveiled its highly anticipated 2024 Security Culture Report, shedding light on Europe’s cybersecurity landscape, which includes the UK.

Despite new legislation and regulations, the report underscores persistent vulnerabilities and challenges faced by organisations across the continent in combating cyber threats effectively.

Segmented into regional versions to capture nuanced perspectives, the report delves into Europe’s cybersecurity maturity levels, organisational behaviours, and attitudes towards cybersecurity. While organisations increasingly recognize the importance of integrating security awareness into their operations, the report reveals a gap between understanding and implementation.

According to the findings, European organisations acknowledge the role of individuals in bolstering resilience against cyber threats, particularly in combating social engineering attacks. However, cybersecurity initiatives often remain siloed within specific teams or units, hindering collaborative efforts and impeding progress.

Despite the EU’s proactive stance in shaping global cybersecurity standards through robust legislation, the report highlights the need for expedited adoption and implementation at the organisational level to enhance effectiveness. 

While legislation exists, its impact varies due to challenges such as language localization of compliance requirements and uneven enforcement.

Recommended reading

• UK Retailor WH Smith Suffers Cyber ‘Incident’
• Strong Cybersecurity Key to AI Superpower Ambitions, Microsoft Says
• Report: Almost 80% of Scottish Tech Sector ‘Optimistic’ for 2024

The report forecasts a surge in both the quality and quantity of cyber-attacks, propelled by advancements in social engineering tactics and the proliferation of disinformation facilitated by AI. Additionally, it emphasises the imperative of cybersecurity education and training within organisations to counter evolving threats effectively.

“While there is a notable upward trend in security awareness within Europe’s most digitised sectors, the understanding and implementation of security culture greatly differ across various industries” said Dr Martin J. Kraemer, security awareness advocate at KnowBe4.

“Nonetheless, it is evident that many organisations still lag behind in establishing a proactive security culture. We are, however, seeing European organisations starting to recognise and acknowledge the critical role of integrating security awareness within their corporate culture to bolster resilience. Yet, we must address the ongoing hurdles in sectors where cybersecurity is not universally recognised as a collaborative effort across departments.”