Which of the following is the most damaging way that employees put your organization at risk of a security vulnerability?
Intentionally Leaking data or intellectual property (criminal insider attack)20%
Downloading a compromised file / Clicking on a malicious link34%
Phishing Emails31%
Using unauthorized apps/tools/devices etc.9%
Insufficient Passwords2%
Mishandling sensitive data
Other (Leave a comment!)
174 PARTICIPANTS

I’d vote for a tie between downloading a malicious link and phishing emails. They are almost the same percentage and each can equally put as at enhanced risk.