Fear of Blame in Cybersecurity: Irish Workers Hesitant to Report Breaches

 

Fear of Blame Hampers Cybersecurity Incident Reporting in Ireland

A recent survey conducted in Ireland highlights a concerning trend: fear of blame is preventing employees from reporting cybersecurity incidents. The study, carried out by Censuswide for IT.ie and SonicWall, collected responses from 1,000 office workers, revealing the negative impact of a blame culture on organizational cybersecurity practices.

Employees Held Accountable for Breaches

According to the findings, nearly 75% of respondents believe their employers hold staff personally responsible for cybersecurity failures. Of these, 35% reported that blame is “always” assigned to employees, while another 35% said this happens “sometimes.” This perception has created a hesitation among workers to address cyber incidents openly.

Alarmingly, almost one-third of respondents admitted to being aware of co-workers losing their jobs due to unintentional cybersecurity errors. To avoid repercussions and embarrassment, the same proportion of employees stopped reporting security breaches over the past year. The survey also highlighted discomfort in raising cybersecurity concerns with senior management, with 20% of respondents reporting unease.

This situation has had a detrimental impact on the mental health of employees: