API breaches19%

Open source & code vulnerabilities31%

Automated website fraud (formjacking, bad bots, Credential stuffing, account takeovers etc.)30%

Insider threats (Excessive permissions, phishing, etc.)19%

Other (comment below)2%


5.6k views29 Upvotes3 Comments

Cyber Threat Intelligence and Incident Response Manager in Software, 201 - 500 employees
I believe the only threat we are still failing to create a solution for is the Human Element. We can implement systems to mitigate some risks from phishing insider threat. However, I feel like building that Security culture is the biggest factor.

Once the Security culture is built, it's about maintaining it
4 2 Replies
Information Security Analyst in Software, 51 - 200 employees

Is it possible that a security culture can be obtained by choosing solutions which get employee buy-in? Noise-free type of solutions which require little to no engagement/friction?

Cyber Threat Intelligence and Incident Response Manager in Software, 201 - 500 employees

Right-hand have a micro learing that give regular bites sized modules to continue the engagement. Without taking huge chunk of time


Content you might like





Less frequent than annually4%


4.6k views1 Upvote

IT Manager in Transportation, 10,001+ employees
Always remember about Risk Assessment. Conduct a thorough risk assessment to identify potential data loss risks and vulnerabilities. Use this assessment to prioritize DLP efforts.
Read More Comments
2k views1 Upvote3 Comments

Director of IT in Education, 5,001 - 10,000 employees
This question requires a long explanation, but in a nutshell, implemented in the Risk Management Framework (NIST RMF). It is a layered protection in every step of the RMF.
Read More Comments
5k views4 Upvotes15 Comments

Yes, it’s unavoidable in cyber54%

No, it can be avoided42%

I don’t know…4%


12.4k views1 Upvote6 Comments