ISDecisions.com

Language: EN | FR | 中文版

The Insider Threat Security Manifesto Beating the threat from within

What type of organisation is most likely to have a culture of password sharing?

Splitting the results across different sectors reveals that architecture and HR are the industries where password sharing is most prevalent, or at least the industries where IT is most aware of it, with the mean average estimate in the industries being 30%.

One industry with a surprisingly high placement on the list is legal (mean average 22%), where a lot of sensitive information is handled and regulations are strict. Is it possible that the restrictions in place in order to ensure regulatory compliance are contributory to the cause of employees sharing their passwords?

Looking at how the numbers differ across organisation size helps to explain why such a high proportion do not believe there is any password sharing present in their organisation. IT professionals in organisations with under 50 employees were far more likely to answer this way, with 45% saying no one shares passwords in their organisation. To be expected, given the fewer employees you have the less necessity there is to share information across departments and again the easier it is to manage.

Removing organisations of under 50 employees, 0% ceases to be the most popular answer, with 40% answering 10% and the mean average increasing to 23%.

Proportion of user password sharing per sector

30,0%

Architecture, Engineering & Building

30,0%

HR

22,3%

Legal

22,3%

Healthcare

21,8%

Manufacturing & Utilities

20,0%

Travel & Transport

20,0%

Sales, Media & Marketing

19,3%

Education

18,8%

Retail, Catering & Leisure

18,4%

Professional services

17,1%

Finance

16,8%

IT & Telecoms

14,8%

Other

12,0%

Arts & Culture