The study was conducted in 2025 by the Toluna research agency on behalf of Kaspersky. It surveyed 2,800 employees and business owners across seven countries—Türkiye, South Africa, Kenya, Pakistan, Egypt, Saudi Arabia, and the UAE—who use computers in their daily work.
A recent Kaspersky survey conducted across the Middle East, Türkiye, and Africa (META) highlights a significant gap in cybersecurity awareness among professionals in Egypt. According to the report, titled “Cybersecurity in the Workplace: Employee Knowledge and Behavior”, only 46% of employees in Egypt have received training on digital threats. This shortfall is particularly serious given that a large proportion of global cybersecurity breaches stem from human error, underscoring the urgency for structured, company-wide cybersecurity education.
The findings reflect a growing need for IT departments to provide clear, consistent guidance and for organizations to adopt comprehensive, practical training programs that reach employees at all levels. This approach is essential to safeguarding corporate data in an era where cyberattacks increasingly target individuals rather than systems.
Human Behavior at the Center of Modern Cyber Risks
In today’s threat landscape, many cyberattacks are deliberately crafted to bypass technical defenses by exploiting human psychology. Sophisticated social engineering schemes, such as phishing emails, rely on urgency and trust to manipulate employees into sharing sensitive information or authorizing fraudulent actions.
The survey revealed that 43% of professionals encountered scams disguised as communications from their organization, colleagues, or suppliers within the past year. Additionally, 16.5% reported suffering negative consequences as a result of these deceptive messages. Other human-related vulnerabilities include compromised passwords, leakage of confidential data, unpatched applications, and unsecured devices.
Training Emerges as the Most Effective Line of Defense
The report emphasizes that human-related cybersecurity incidents can be significantly reduced through proper education and awareness initiatives. However, 13.5% of respondents admitted making IT-related mistakes due to insufficient knowledge. When asked about the most effective method for raising cybersecurity awareness, 60% chose structured training over storytelling approaches (19%) or reminders of legal responsibilities (46%).
These results affirm that cybersecurity training is not optional—it is an essential component of an organization’s defense strategy.
Growing Demand for Comprehensive, Role-Based Training
When given the option to select preferred training topics, respondents showed strong interest in a wide range of cybersecurity areas. Among their top choices were:
-
Protection of confidential work data (41%)
-
Account and password security (39%)
-
Website and internet safety (35%)
-
Mobile device security (34.5%)
-
Safe use of social networks and messaging platforms (32%)
-
Email security (31%)
-
Secure remote work (28%)
-
Safe use of AI-powered tools such as chatbots (21%)
Notably, 17.5% expressed interest in receiving training across all topics, demonstrating a widespread appetite for in-depth cyber education.
Embedding Cyber Awareness Into Daily Work Culture
The data suggests employees are open and willing to deepen their understanding of cyber risks. However, for cybersecurity awareness to translate into daily safe practices, training must be:
-
Well-structured
-
Tailored to job roles and technical skill levels
-
Continuously updated
-
Gamified and practical
This combination increases engagement and helps ensure long-term knowledge retention. By investing in such efforts, organizations do more than meet compliance requirements—they cultivate a security-first mindset that transforms employees from potential vulnerabilities into empowered digital defenders.
As Rashed Al Momani, General Manager for the Middle East at Kaspersky, notes:
“Cybersecurity can’t live solely within the IT department. Everyone—from executives to new hires—needs a clear grasp of digital risks. A truly resilient organization is built by equipping every employee with the skills to recognize scams, prevent costly errors, and safeguard company data.”
Key Measures for Organizations to Strengthen Cyber Defenses
To build a robust security posture, the report recommends that organizations:
-
Adopt advanced monitoring and cybersecurity tools, such as the Kaspersky Next product line
-
Implement ongoing employee training programs like the Kaspersky Automated Security Awareness Platform
-
Establish clear security policies covering passwords, software installation, and network segmentation
-
Encourage a culture of security through proactive reporting and recognition of safe behaviors
