A changing cyber world outpacing Kiwis’ security steps

Te Whanganui-a-Tara - While New Zealanders have mostly picked up good passive behaviours, like not clicking on strange links in emails or deleting spam texts, they aren’t taking enough proactive steps to be secure online, says new research from the NZ computer emergency response team (CERT NZ).

As New Zealanders do more online, the number of people experiencing cyber security incidents is also increasing. Since 2019 New Zealander’s online shopping and transactions activity has doubled, and so has the number of incidents reported to CERT.

Research has found 62 percent of New Zealanders have experienced a cyber threat, over a three month period. Despite this, cyber threats only rank ninth (21 percent) in areas of concern and 70 percent of New Zealanders feel confident in their level of cyber security.

CERT director Rob Pope says said this doesn’t mean all New Zealanders don’t care about cyber security and protecting themselves online.

“There are a number of barriers including awareness of what to do, how to do it and understanding why it’s important to being secure online. Our research shows that some New Zealanders see the cyber security steps as complicated; and others aren’t aware of the risks.”

While only one in five Kiwis are concerned about general cyber security, that jumps to four in five when people respond to security of personal information online.

While 70 percent of Kiwi wouldn’t share personal information with strangers online, over half the adult population has their social media accounts set to friends-only or private meaning anyone can view the information they share.

Using insights from CERT’s research is going to help the wider online security industry, provide better reach for New Zealanders and shift their cyber security behaviours in a positive direction.

CERT NZ will be the research to guide a campaign to people understand the impacts of cyber incidents.

Media are the platform where most New Zealanders (73 percent) hear about cyber security incidents, however, these are often different to what they experience personally.

Large scale incidents such as ransomware, DDoS attacks and data breaches on businesses and organisations receive more coverage but are very different to the lived experience of individuals, email, text message and phone scams.

Media reports are often accompanied by technology focussed imagery or shadowy stock images furthering the perception of being out of reach to most Kiwis.

Cyber security is perceived as complex, intangible and inaccessible to everyday New Zealanders but Aotearoa now has an opportunity to change behaviours by making cyber security human and tangible with a positive message.