A survey released today by IT security firm ESET finds that Americans believe “criminal hacking into computer systems” is now a top risk to their health, safety and prosperity. Criminal hacking, the survey finds, outranks other significant hazards, including climate change, nuclear power, hazardous waste, and government surveillance. Risk perceptions were found to vary between different demographic groups but several cyber-related hazards were consistently rated as “moderate” to “high risk.”
The survey was conducted by ESET security researchers Stephen Cobb and Lysa Myers. It asked randomly selected adults to rate their risk perception of 15 different hazards. Six of the hazards were cyber-related while the rest were other forms of technology hazard. The data revealed that “criminal hacking” was rated the top risk, with “air pollution” coming in second. Another cyber-related risk, the theft or exposure of private data, was rated fourth, after hazardous waste disposal.
The complete survey results and supporting visuals can be found here.
“To be honest, I was pretty shocked at the results, so much so that we ran the survey a second time…and lo and behold, we got the same result,” said ESET Senior Security Researcher Stephen Cobb who with ESET Security Researcher Lysa Myers, oversaw the survey. “For many years, social scientists have studied how the public perceives a range of technology risks, but as far as we know, this is the first time anyone has put ‘cyber-risks’ into the mix,” said Cobb.
ESET Security Researcher Lysa Myers noted, “New technology is dramatically accelerating the pace of change in our lives; this transformation can feel both exciting and frightening. The Internet has only recently become a part of our day to day activities, so it may feel both ubiquitous and yet alien to many people.”
The survey was carried out in late July, early August, after the WannaCry and Petya/NotPetya malware outbreaks but before the Equifax breach.
To conduct their research, Cobb and Myers adapted two survey instruments previously used in numerous academic studies of risk perception: the “Industrial Strength Risk Perception Measure” and the “Cultural Cognition Worldview Scales.” Both were derived from the work of Prof. Dan M. Kahan of the Cultural Cognition Project at Yale Law School, to whose pioneering work in this field the researchers are indebted.
According to Cobb, numerous past surveys have shown that the public is concerned about criminal hacking and other information technology hazards like government surveillance (see: Privacy and security post-Snowden: Pew Research parallels ESET findings).
“Our goal with this study was to place those cyber-related risks in the broader context of more established and more thoroughly documented risks; and the results strongly suggest that cyber-risks are now front and center in the American consciousness.”
Cobb and Myers will present their findings, including a demographic analysis of variations in risk perception and the implications for risk communication and reduction, at ISC2 Security Congress (September 25-27 in Austin, TX).
Survey Methodology
Conducted online via SurveyMonkey. Results based on responses from 740 adults (via “SurveyMonkey Audience.”) Respondents were asked to rate 15 different risks individually on an eight-point Likert scale (0 for “No Risk At All” to 7 for “Very High Risk”). Further details on the survey methodology can be found here.
About ESET
For 30 years, ESET has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint and mobile security, to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give consumers and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real-time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D centers worldwide, ESET was the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003. For more information visit www.eset.com or follow us on LinkedIn, Facebook and Twitter.