Cybersecurity experts worldwide have pointed to human error as the biggest threat to corporate security in the period ahead. Hacking techniques are becoming more sophisticated, but human factors remain a serious risk, such as falling for phishing or failing to follow security rules.

Tech news outlet TechRadar reported on Tuesday that IT management and security company Kaseya surveyed 1,132 managed service providers (MSPs) and IT professionals in more than 60 countries on perceptions of cybersecurity threats.

The survey found 68 percent of respondents cited human error as the attack path they are most concerned about over the next 12 months. It includes mistakes caused by being fooled by social engineering attacks or by lapses in attention. Some 55 percent said they were concerned about attacks via email.

Similar issues were identified at organisations that experienced actual security incidents. Among respondents at organisations that had incidents over the past 3 years, 41 percent cited careless user behaviour or an easily fooled attitude as the cause, while 40 percent pointed to a lack of security training.

The survey also showed that compliance alone may not be enough to ensure security. About 65 percent of respondents said they could pass a security compliance audit without separate preparation, but 49 percent worried that incomplete documentation and policies could become an issue during the audit process.

Budget and staffing shortages were also key challenges. Only 20 percent of IT departments said budgets were increasing in line with rising security risks. Some 77 percent of all respondents said they were experiencing a lack of resources.

David Baggett (데이비드 배깃), head of Kaseya's security suite division, pointed out that "people are not perfect, but much of cybersecurity still depends on the assumption that people will make the right judgement every time." He added, "true cyber resilience is not about completely eliminating mistakes, but about building an organisation that can withstand them even when they occur."

The survey shows that the core of corporate security lies not only in threat detection technology, but also in preventive systems that account for user mistakes and in strengthening incident response capabilities.