"High-Risk Users May Be Few, but the Threat They Pose Is Huge"

According to research conducted by Elevate Security, about 10 percent of the workforce is composed of high-risk users, who are in every department and function of the business. In addition, the study uncovered multiple unexpected findings. For example, contractors are less likely to pose a high risk than employees, and simulated phishing is not a reliable indicator of who poses a high risk for real phishing attacks. This study debunks the idea that many traditional ways to decrease user risk rely on simulated phishing tests as the major determinant for detecting potentially risky individuals. Although they constitute a small portion of the population, high-risk users pose a significant threat to the organization. This article continues to discuss key findings from Elevate Security's research on high-risk users. 

Help Net Security reports "High-Risk Users May Be Few, but the Threat They Pose Is Huge"