Major IT Attacks Mostly Caused Because Of Human Error: How Can That Be Stopped

Microsoft’s recent Windows outage was caused by an update error at Crowdstrike which is nothing but an error from its engineers. And most IT incidents seem to have resulted from such mistakes.

Human error remains a significant contributor as IT security incidents rise, with 15 percent of respondents reporting frequent occurrences and an additional 35 percent noting occasional lapses, a report said on Friday. The report by CIO&Leader, in collaboration with research firm BM Nxt, indicates a growing recognition of the severe consequences of IT security incidents on business operations, data loss and financial performance.

High-impact ratings for business disruptions increased from 20 percent to 24 percent while data loss concerns surged, with high-impact ratings rising from 19 percent to 23 percent.

“The persistence of human error as a leading cause of security breaches highlights the urgent need for continuous training and awareness programs within organisations,” said R Giridhar, Research Head at CIO&Leader.

While robust technological defences are crucial, empowering employees with the knowledge and skills to reduce risks is equally essential, he added.

The report said that although the frequency of human errors has decreased from 22 percent in 2023 to 15 percent in 2024, the rise in rare incidents from 24 percent to 41 percent signals that human error remains a persistent concern.

Malware incidents have remained steady, with 11 percent of respondents experiencing them often and 37 percent occasionally. Social engineering attacks are also a significant threat, with 11 percent reporting frequent occurrences and 27 percent occasional.

“Phishing attacks are identified as the most severe threat, with 50 percent of respondents rating them as highly severe, reflecting their prevalence and effectiveness,” said the report.

It added that majority of organisations are focusing on providing training for employees (69 percent), while 20 per cent are planning to do it within six months and 7 percent within 12 months.

The increasing reliance on platform vendors is a significant challenge, with 26 percent of respondents rating it as a high concern and 35 percent as a medium concern, the report noted.