Cybersecurity Policy Gaps Leave Organizations Vulnerable in META Region

• •39% of professionals find their company's cybersecurity rules excessive or inappropriate.
• •38% of respondents report no policies for using non-corporate devices.
• •26% of employees installed software on work devices without IT supervision in the past year.

A Kaspersky survey titled 'Cybersecurity in the Workplace: Employee Knowledge and Behaviour' reveals significant cybersecurity policy gaps in the META region, particularly in Pakistan. 39% of professionals consider their company's cybersecurity rules excessive or inappropriate, while 8% report a lack of awareness or absence of such rules. The survey indicates that 38% of respondents lack policies governing non-corporate device usage, and 26% admitted to installing software on work devices without IT supervision in the past year. The findings highlight the risks associated with shadow IT and unmanaged devices, which expose organizations to security vulnerabilities and compliance issues. Recommendations include conducting shadow IT audits and establishing clear security standards for personal devices. The survey emphasizes the need for organizations to adopt user-centric cybersecurity strategies that integrate technology with employee awareness.