WELLINGTON, NEW ZEALAND – A recent survey by Datacom has uncovered a significant disparity between the perceived cybersecurity readiness of New Zealand business leaders and their employees, raising concerns about potential vulnerabilities in organizational defenses. The "State of Cybersecurity Index" reveals a critical awareness gap, with leaders significantly overestimating their employees' preparedness to handle cyber threats.   

The survey, conducted by TRA in November 2024 and encompassing 211 security leaders and 506 employees across New Zealand and Australia, found that while 71% of New Zealand security leaders believe their employees are well-informed about cybersecurity issues, only 51% of employees share this confidence. This 20-percentage-point gap highlights a potential overconfidence among leadership regarding their organization's actual cyber readiness.   

A key concern among security leaders is the rising threat of AI-based cyber-attacks. Despite this, many employees are actively using AI tools like ChatGPT and Copilot, often without adhering to established organizational AI security policies. "Leaders are overestimating employee preparedness, and that overconfidence increases cyber risk," stated Collin Penman, Chief Information Security Officer at Datacom.   

Furthermore, security burnout is a prevalent issue in New Zealand, with 61% of security leaders reporting feelings of fatigue, surpassing the 58% recorded in Australia. This burnout could compromise the effectiveness of security measures. "There is a real risk that businesses are operating with a false sense of security. Leaders believe their teams are ready to tackle threats, but this disconnect is leaving businesses exposed," Penman warned.   

Data from the National Cyber Security Centre corroborates these concerns, revealing 7,122 cybersecurity incidents in New Zealand in the past year, underscoring the escalating challenge of cyber threats.   

The survey also highlighted the rapid adoption of AI in New Zealand businesses, with 80% reporting positive impacts, particularly in automation and data analytics. However, this swift adoption has not been matched by the development of robust security governance frameworks, creating potential risks. A recent report projects that generative AI could contribute NZD $76 billion to the economy by 2038, emphasizing the need for secure and responsible AI integration.   

Comparatively, New Zealand businesses lag behind their Australian counterparts in comprehensive cyber resilience strategies and employee awareness of AI security risks. "New Zealand cannot afford to fall behind in cyber resilience," Penman emphasized, urging businesses to embed governance into their security frameworks.   

The findings of this survey underscore the urgent need for New Zealand businesses to bridge the cybersecurity readiness gap, ensuring that security measures keep pace with the evolving technological landscape and the increasing sophistication of cyber threats.

[Copyright (c) Global Economic Times. All Rights Reserved.]