A recent survey by cybersecurity solutions firm Fortinet reveals that nearly 60% of organizations in the Philippines believe their employees lack fundamental cybersecurity knowledge, raising concerns about vulnerability to advanced cyberattacks.
The report also shows that 92% of respondents recognize the importance of security awareness training and have become more open to implementing these programs.
“As cybercriminals increasingly leverage artificial intelligence (AI) to enhance their attacks, it becomes imperative for organizations in the Philippines to strengthen their security awareness initiatives,” said Alan Reyes, country manager of Fortinet Philippines. “Employees must be equipped with the skills to identify and respond to these evolving threats.”
The survey included 50 executives and managers from organizations across the Philippines and Malaysia, spanning industries such as manufacturing, financial services, technology, and professional services.
Phishing
Phishing schemes remain a primary concern as attackers use AI to make fraudulent communications more convincing. The report notes that more than 80% of global organizations faced malware, phishing, or password attacks last year. To combat these threats, 90% of respondents include phishing prevention in their training programs. Other top priorities include data privacy, malware prevention, and data security.
Fortinet emphasized that engaging and time-efficient training programs are crucial for success.
“For these initiatives to be effective, organizations need to regularly reassess and refine their training programs, ensuring they are engaging and relevant,” Reyes said.
Equipping employees
Nearly all respondents (96%) indicated that their leadership supports security awareness programs, with 98% reporting improvements in their organization’s cybersecurity posture after implementing training. However, the report also highlights the challenge of training fatigue, with decision-makers suggesting sessions should last between 1.6 and 3 hours to maintain engagement.
Beyond equipping employees to recognize and respond to threats, training creates a culture of cybersecurity within organizations.
“Strengthening cybersecurity awareness, alongside employing skilled security professionals and advanced tools, enhances an organization’s ability to defend against sophisticated threats,” Reyes said.
Fortinet’s Security Awareness and Training service aims to help businesses build cyber-aware workforces by offering customizable content, progress tracking, and periodic reminders to reinforce learning.