Cyber threats are a routine workplace experience for many European employees, according to survey findings highlighted by the European Union Agency for Cybersecurity (ENISA). The results point to a gap between broad awareness of cyber risk and the training, reporting habits and practical confidence needed to respond consistently.
Survey finds broad exposure but uneven preparedness
The European Commission’s Eurobarometer survey found that 74% of employees had encountered suspicious emails, messages, voice calls or links during the previous six months. Phishing or fraudulent email was the most frequently reported threat at 39%, while 18% encountered attempts to obtain personal data or passwords.
Awareness is comparatively high: 83% said a cyberattack could have serious consequences for their organization. Preparedness is less uniform. The survey says 60% received cybersecurity training in the previous year, participation was lower in smaller organizations, and only 48% felt able to recognize AI-generated fake videos. At the same time, 85% expressed interest in improving their cybersecurity skills.
Operational lessons for security teams
The findings reinforce the need to treat workforce readiness as part of operational security rather than a once-a-year compliance exercise. Short, role-specific training can be paired with clear reporting channels, realistic phishing simulations and rapid feedback after suspicious activity. Organizations responsible for essential services should also connect employee reporting to incident-response procedures so that a suspicious message can be assessed before it becomes a wider compromise.
For teams managing connected facilities and operational environments, the human layer should complement technical controls such as access management, network segmentation and monitored response workflows. SectechMedia’s cyber-physical security coverage follows how these controls intersect with physical operations.
Leave a Reply