Protecting People 2019

Not everyone in your organization is a VIP.

But anyone can be a VAP: Very Attacked Person™

And these VAPs aren’t always the people you expect. That’s because today’s attacks target users in countless ways, across new digital channels, with objectives that aren’t always obvious. Just as people are unique, so is their value to cyber attackers and risk to employers. They have distinct digital habits and weak spots. They’re targeted by attackers in diverse ways and with varying intensity. And they have unique professional contacts and privileged access to data, systems and resources. These three factors—vulnerability, attacks, and privilege— determine their overall risk.

This report presents data gathered January–June 2019. We examine which employees, departments, and industries are the most vulnerable. We analyze which ones receive the most targeted threats. And we explore how their privilege might be abused.

Based on these findings, we recommend concrete steps you can take to build a defense that focuses on your people.