August 18, 2017 By David Strom 2 min read

End users in the U.S. and U.K. have very different attitudes toward security. Earlier this summer, Wombat Security surveyed more than 2,000 working adults — half in the U.S. and half in the U.K. — about various cybersecurity topics and perceptions of best practices. The researchers found some interesting surprises and noted a series of different attitudes and actual security practices between citizens of the two countries.

Identifying Security Awareness Gaps

The biggest difference is that half of the Americans surveyed have been cybertheft victims, compared to 19 percent of British respondents. Statistics regarding social media breaches were similarly skewed.

Alarmingly, the report also revealed some interesting misconceptions about security basics. Roughly one-third of the Americans thought that malware was something that boosted Wi-Fi signals, for example, while only a small percentage of the British respondents thought this was true. Clearly, there is room for education here on both sides of the pond.

Another big difference: Americans have more trust in their digital lives than U.K. users, which is not necessarily a good thing. More than half of the U.S. respondents thought they could trust Wi-Fi networks in locations such as a hotels and coffee shops, but less than a third of the British respondents felt this way. Almost the same percentage of U.S. users (58 percent) thought they could trust their antivirus software to stop a potential cyberattack, while only 37 percent of U.K. users thought that was true.

Differences in Security Practices

When it comes to using appropriate password hygiene, 38 percent of Americans use password managers, compared to 10 percent of British users. Still, both groups have a big block of users who maintain just a few of the same passwords when they go online. Additionally, 8 percent of U.S. users and 14 percent of U.K. users lack a lock screen password on their mobile devices.

Virtual private network (VPN) use is more widespread in the U.S. than in the U.K. (65 percent versus 44 percent, respectively). In fact, 33 percent of British respondents reported that they didn’t know what a VPN was, compared to just 19 percent of Americans. And although 21 percent of users in the U.S. reported that they rarely or never use a VPN, that number was almost twice as high for British respondents (38 percent).

A Long Way to Go

The report made no attempt to explain why these fundamentals of network and data security diverge between the two populations. Still, both American and British users clearly have a long way to go before we can see better security practices in the general population.

More from Risk Management

What’s behind unchecked CVE proliferation, and what to do about it

4 min read - The volume of Common Vulnerabilities and Exposures (CVEs) has reached staggering levels, placing immense pressure on organizations' cyber defenses. According to SecurityScorecard, there were 29,000 vulnerabilities recorded in 2023, and by mid-2024, nearly 27,500 had already been identified.Meanwhile, Coalition's 2024 Cyber Threat Index forecasts that the total number of CVEs for 2024 will hit 34,888—a 25% increase compared to the previous year. This upward trend presents a significant challenge for organizations trying to manage vulnerabilities and mitigate potential exploits.What’s behind…

Addressing growing concerns about cybersecurity in manufacturing

4 min read - Manufacturing has become increasingly reliant on modern technology, including industrial control systems (ICS), Internet of Things (IoT) devices and operational technology (OT). While these innovations boost productivity and streamline operations, they’ve vastly expanded the cyberattack surface.According to the 2024 IBM Cost of a Data Breach report, the average total cost of a data breach in the industrial sector was $5.56 million. This reflects an 18% increase for the sector compared to 2023.Apparently, the data being stored in industrial control systems is…

Cybersecurity Awareness Month: Horror stories

4 min read - When it comes to cybersecurity, the question is when, not if, an organization will suffer a cyber incident. Even the most sophisticated security tools can’t withstand the biggest threat: human behavior.October is Cybersecurity Awareness Month, the time of year when we celebrate all things scary. So it seemed appropriate to ask cybersecurity professionals to share some of their most memorable and haunting cyber incidents. (Names and companies are anonymous to avoid any negative impact. Suffering a cyber incident is bad…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today