October 17, 2017 By Larry Loeb 2 min read

Baby boomers tend to pay more attention to cybersecurity issues than millennials, according to a recent survey — but not by much.

The “2017 Consumer Cybersecurity Study,” conducted by payment technology solutions company First Data, evaluated the cybersecurity awareness of different age groups and sought to discover what issues each demographic considered important.

Is Cybersecurity Awareness Generational?

One of the biggest awareness gaps the study identified was widespread password reuse, a behavior that can exacerbate the effects of a data breach, ATM Marketplace reported. In fact, 70 percent of boomers said they reuse passwords on sites and apps, while a whopping 82 percent of millennials reported that they practice the same behavior.

The two groups also exhibited differences in the way the change their passwords. While 32 percent of boomers reported that they changed their passwords only when forced to do so, that figure is as high as 42 percent for millennials.

Both boomers and millennials are wary that their online activities could expose them to attacks. Forty-nine percent of millennials responded that they had concerns about their online security posture after recent cyberattacks, while 65 percent of boomers expressed the same unease.

The areas that produce this anxiety, however, vary slightly between the two age groups. For example, boomers seem to have more faith in bank security than millennials — 19 percent consider an online bank attack to be unlikely, compared to 14 percent of millennials.

Boomers More Cautious With Enterprise Security

Survey respondents from both age groups appear to understand enterprise security fairly well: About 72 percent of boomers avoid storing work-related data on their personal devices, compared to 69 percent of millennials.

The study also suggested that older employees are more likely to consult with IT before downloading software (86 percent) than their millennial counterparts (75 percent). Furthermore, 34 percent of baby boomers consider how their online activities affect their enterprise. Only 21 percent of millennials exhibit the same awareness.

First Data’s report offered insight into the subtle differences between the two age groups, but these variances are not definitive. While boomers appear somewhat more cautious than millennials, both demographics must work to increase their level of awareness to protect both personal and enterprise data.

More from

Passwords, passkeys and familiarity bias

5 min read - As passkey (passwordless authentication) adoption proceeds, misconceptions abound. There appears to be a widespread impression that passkeys may be more convenient and less secure than passwords. The reality is that they are both more secure and more convenient — possibly a first in cybersecurity.Most of us could be forgiven for not realizing passwordless authentication is more secure than passwords. Thinking back to the first couple of use cases I was exposed to — a phone operating system (OS) and a…

DOD establishes Office of the Assistant Secretary of Defense for Cyber Policy

2 min read - The federal government recently took a new step toward prioritizing cybersecurity and demonstrating its commitment to reducing risk. On March 20, 2024, the Pentagon formally established the new Office of the Assistant Secretary of Defense for Cyber Policy to supervise cyber policy for the Department of Defense. The next day, President Joe Biden announced Michael Sulmeyer as his nominee for the role.“In standing up this office, the Department is giving cyber the focus and attention that Congress intended,” said Acting…

Unpacking the NIST cybersecurity framework 2.0

4 min read - The NIST cybersecurity framework (CSF) helps organizations improve risk management using common language that focuses on business drivers to enhance cybersecurity.NIST CSF 1.0 was released in February 2014, and version 1.1 in April 2018. In February 2024, NIST released its newest CSF iteration: 2.0. The journey to CSF 2.0 began with a request for information (RFI) in February 2022. Over the next two years, NIST engaged the cybersecurity community through analysis, workshops, comments and draft revision to refine existing standards…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today