New Survey Shows Sizable Gap Between Americans' Online Security Perceptions and Actual Practices

WASHINGTON, Nov. 15, 2011 /PRNewswire-USNewswire/ -- More than nine in ten Americans (92%) believe that a safe and secure Internet is crucial to our nation's economic security and 81% of Americans want to learn more about being safe and secure online, but there still exists a visible disconnect between Americans' perceptions of their online safety practices versus the reality of their actual safety practices. These insights were revealed in the 2011 National Cyber Security Alliance (NCSA)-McAfee Online Safety Study, released today by the NCSA and McAfee.

(Logo: http://photos.prnewswire.com/prnh/20110504/DC95016LOGO)

(Logo: http://photos.prnewswire.com/prnh/20101004/DC76016LOGO)

While the study found progress in a number of areas regarding online safety awareness, perception versus reality gaps continue to exist in critical areas:

• 70% of Americans say that they represent their child/children's primary source of information for online safety, yet 48% of parents are not completely confident that their children can use the Internet safely.
• 32% of consumers either back up data only once a year—or never (20%).
• 15% of Americans have never checked their social networking privacy and security account settings.
• According to the survey, only 7% of U.S. parents are worried about cyberbullying even though 33% of teenagers have been victims of cyberbullying, according to the Pew Internet and American Life Survey.

"This new study shows that vast majorities of Americans believe that cyber security is important for our personal safety and our nation's economic security," said NCSA Executive Director Michael Kaiser. "Yet this survey also shows that we can do a better job of protecting ourselves and those around us and really focus on the notion that a safe and secure Internet and digital experience represents a shared responsibility."

"As our digital usage grows exponentially each year with a multitude of different devices connected to the Internet, cyber threats have grown more sophisticated and widespread than ever before," said Todd Gebhart, co-president, McAfee. "This new survey demonstrates the fundamental importance of better online safety and security awareness for ourselves, our communities, our schools and our businesses.  Consumers need to think beyond just PCs, and also protect their web experiences, their data, and very importantly, their children on all the devices they use." 

Key Findings:
Security Perceptions

• Less than half of the population (46%) reports that they feel safe from viruses, malware and hackers while on the Internet.
• When it comes to the issue most Americans are concerned about regarding online safety and security, 43% of respondents reported they were most worried about identity theft; 13% were concerned with loss of privacy; and 12% reported their biggest concern was someone monitoring or recording their online activity.
• When asked how people would like to learn about staying safe online, 37% of Americans are willing to receive regular information from an organization about safety best practices; 15% are willing to educate others; 13% would attend an in-person education session; 20% are not willing to do any of these and 15% are not sure.

Crime and Law Enforcement

• When asked what puts Americans most at risk of a cybercrime or a loss of personal information the largest number of respondents, one-third (33%) said they believe connecting to an unsecured wireless network puts them most at risk yet more than half (53%) of Americans said they have logged onto a wireless network without entering a security password. 
• One in 5 (18%) Americans have been the victim of a cybercrime and 38% know someone who has been victimized, and 65% of all respondents do not think their local police department is equipped to handle reports and investigate Internet crimes.
• Of the 17% who were victims of cybercrime but did not report them, 34% were either unsure what exactly happened or were not sure who to report it to.   
• More than half (53%) of Americans indicated they have received fake anti-virus warnings but 87% said they did not believe the warning was legitimate. From 2008 to 2010, fake anti-virus scams have grown by 600% and are estimated to victimize one million Internet users per day, according to McAfee research.

Safe Computing Practices

• 54% of Americans don't back up their data regularly; with 21% backing up just monthly; 12% backing up only once a year and 20% of consumers never backing up.
• 21% say they don't think it's necessary to change account passwords regularly even though experts believe this is a basic online safety practice.  More than a million password-stealing malware samples were discovered from January 2011 – June 2011, according to McAfee Labs.
• 25% say they never change their passwords unless prompted.

Social Networks

• 26% say they are sharing more information on social networks today than one year ago.
• Nearly half (47%) of Americans are confident in their ability to use privacy and security account settings in their social networks, but another 47% are only somewhat confident with 24% saying they are not confident at all.
• 15% of respondents have never checked their social networking privacy and security account settings and only 18% said the last time they checked their settings was in the last year. 
• Meanwhile, one out of ten (11%) Americans reported that their social network has been hacked in the last year, while 81% did not.

Children and Online Safety

• 70% of Americans say that they represent their child/children's primary source of information for online safety, yet 48% of parents are not completely confident that their children can use the Internet safely.
• According to the survey, parents worry most about contact with strangers (38%) online, 7% worried about bullying and harassment and 9% were worried about identity theft even though 140,000 minors are the victims of ID fraud each year according to ID Analytics.
• The concern that ranked second according to parents was exposure to adult content yet 44% of parents admit they have not discussed Internet pornography with their children and 44% don't have content-filtering software on their computers.
• 48% of the parents surveyed say they know their child/children have seen pornography online and of the parents who aren't sure if their kids have seen adult content, 68% think it unlikely that they have.
• Of those parents who don't have content-filtering software, 34% say they trust their kids.

Workplace Cyber Security Practices

• The survey also polled a sub-sample of Americans cyber security practices and attitudes in their workplace.  The survey found that a majority say their employer has a formal work Internet usage policy (59%) while 26% do not. 
• But respondents are split as to whether or not they have had training on keeping their work computers safe and secure (43% to 43%).
• Seven in ten (69%) say that a safe and secure Internet is dependent to their job, 45% of which say it is very dependent. Six in ten (61%) say that losing Internet access at their job for 48 consecutive hours during a regular business week would be disruptive, 43% say it would be extremely disruptive. 
• A 2011 NCSA/Symantec study of small businesses finds that two thirds (66%) say that their business is dependent on the Internet for its day-to-day operations, two fifths of which (38%) would characterize it as very dependent.  Two thirds (67%) of small business owners describe their businesses as more dependent on the Internet than it was 12 months ago.

Age Disparities

• Respondents ages 18-54 feel that individual users are most responsible for keeping the Internet safe and secure, whereas users 55 and older believe that it is the Internet service provider who is most responsible.
• As the age of the user increases, so does their concern over identity theft, with 40% of 18-29 year olds, 39% of 30-49 year olds, 47% of 50-64 year olds, and 50% of those 65+ citing this as their largest concern.
• As respondents' age increases, a smaller percentage feels safe using smartphones with 23% of 18-29 year olds, 11% of 30-49 year olds, and 2.5% of 50-64 year olds feeling safe accessing the Internet using their smartphones.

Gender Attitudes Towards Cyber Security

• If a computer were infected by a virus or malware, and the user was provided step-by-step instructions to fix it, only 31% of females feel very confident in fixing the computer on their own versus 53% of males who feel very confident about pursuing this task.  
• Nearly one in every five males (or 19%) backup their data and digital information on a daily basis while a less amount of females – only 12% – do so each day.
• Thirty-eight percent of females have undergone training to keep their computer safe and secure at work, while 48% of males received training about safe and secure cyber security practices in the workplace.

Additional study results are available at: www.staysafeonline.org.

For the study, NCSA and McAfee commissioned Zogby International to analyze the cyber security behaviors and perceptions of Americans.  The study surveyed 2,337 adults nationwide from 9/23/11 to 9/28/11.   Slight weights were added to region, age, race, gender, and education to more accurately reflect the population. The margin of error is +/- 2.1 percentage points. Margins of error are higher in sub-groups. The MOE calculation is for sampling error only.

About The National Cyber Security Alliance
The National Cyber Security Alliance is a non-profit organization. Through collaboration with the government, corporate, non-profit and academic sectors, the mission of the NCSA is to empower a digital citizenry to use the Internet securely and safely protecting themselves and the technology they use and the digital assets we all share. NCSA works to create a culture of cyber security and safety through education and awareness activities. NCSA board members include: ADP, AT&T, Bank of America, Cisco Systems, EMC Corporation, ESET, Facebook, General Dynamics Advanced Information Systems, Google, Intel, Lockheed Martin Information Systems & Global Services, McAfee, Microsoft, PayPal, Science Applications International Corporation (SAIC), Symantec, Verizon and Visa. Visit http://www.staysafeonline.org for more information. Find NCSA on Facebook at www.facebook.com/staysafeonline.

About McAfee
McAfee, a wholly owned subsidiary of Intel Corporation (NASDAQ:INTC), is the world's largest dedicated security technology company. McAfee delivers proactive and proven solutions and services that help secure systems, networks, and mobile devices around the world, allowing users to safely connect to the Internet, browse and shop the Web more securely. Backed by its unrivaled Global Threat Intelligence, McAfee creates innovative products that empower home users, businesses, the public sector and service providers by enabling them to prove compliance with regulations, protect data, prevent disruptions, identify vulnerabilities, and continuously monitor and improve their security. McAfee is relentlessly focused on constantly finding new ways to keep our customers safe. http://www.mcafee.com

About STOP. THINK. CONNECT.
The campaign was developed by the STOP. THINK. CONNECT. Messaging Convention, a public-private partnership established in 2009 and led by The Anti-Phishing Working Group (APWG) and National Cyber Security Alliance (NCSA) to develop and support a national cybersecurity awareness campaign.  In October 2010 the White House, U.S. Department of Homeland Security and Messaging Convention launched the campaign. The Department of Homeland Security provides the Federal Government's leadership for the campaign. Industry, government, non-profits and education institutions participate in STOP. THINK. CONNECT. Learn how to get involved with the Stop. Think. Connect. Facebook page at https://www.facebook.com/STOPTHINKCONNECT and the campaign website at www.stopthinkconnect.org.

SOURCE National Cyber Security Alliance