WASHINGTON, DC, Sept. 9, 2020 – The recent national debate over the use of TikTok and other social media applications on work devices has heightened security concerns for the owners of small and medium-sized businesses (SMBs). According to a new Cyber Readiness Institute (CRI) survey of SMBs, 56% believe that their employees’ social media use poses a cybersecurity threat. Yet, 82% of employers allow employees to use personal devices to access work email or other data and 64% say that more than half of their workers have social media applications on devices they use for work.
Business owner cybersecurity concerns appear to be warranted as 22% of workers admit to ignoring or working around their company’s cybersecurity guidelines on a daily or weekly basis. While 56% of employees say they have social media applications on devices they use for work, only 30% say their company has issued new guidelines on the use of social media applications on devices used for work.
“It is clear that small business owners are fully aware of the cybersecurity risks associated with mixing personal and work activities on the same device,” said Kiersten Todt, Managing Director of the Cyber Readiness Institute. “SMBs now need to issue policies that address these risks. More than 4-in-5 owners allow employees to use personal devices for work and only about half have policies regarding the apps that can or cannot be on devices used. It is a recipe for cyber insecurity.”
What Social Media Applications Do Employees Use on Their Work Devices
| 50% | |
| 39% | |
| 26% | |
| 22% | |
| Spotify | 19% |
| TikTok | 13% |
| Snapchat | 15% |
During the week of Aug. 17, CRI used Survey Monkey to survey 400 SMB owners (margin of error of +/- 6%) and 1,059 U.S. workers (margin of error +/- 3%).
Additional survey findings include:
There are specific actions that all companies can take to protect their employees, customers, and businesses, including:
More resources to help SMB owners manage the security challenges of a remote workforce can be found at https://cyberreadinessinstitute.org/remote-work-resources
The Cyber Readiness Institute
The Cyber Readiness Institute is a non-profit initiative that convenes business leaders from across sectors and geographic regions to share resources and knowledge that inform the development of free cybersecurity tools for small and medium-sized enterprises (SMEs). Our Remote Work Resources are available in Spanish and French. The self-guided, online Cyber Readiness Program is available in Chinese, English, French, Spanish, Portuguese, Arabic, and Japanese. To find out more, visit www.BeCyberReady.com.
