In an organization, how are policy violations MOST likely to occur?

Question

Options

• ABy accident
• BDeliberately by the ISP
• CDeliberately
• DDeliberately by the cloud provider

• A
  91% (20)
• B
  5% (1)
• D
  5% (1)

Explanation

Security research and incident data consistently show that the vast majority of policy violations in organizations occur unintentionally - through human error, inattention, misunderstanding of policies, or simple carelessness (e.g., emailing sensitive data to the wrong recipient, using unapproved shadow IT tools, misconfiguring access settings). Deliberate insider violations (C) do occur but are statistically far less common. Attributing violations to the ISP (B) or the cloud provider (D) conflates external third parties with internal policy compliance - these parties are not subject to the organization's internal policies in the same way employees are.

No community discussion yet for this question.