People, Privacy and Responsibility

Currency of Knowledge: The Human Side of Cybersecurity

Technology alone cannot secure an organisation. Employees make decisions every day about passwords, emails, data sharing, access and the use of digital tools. At the same time, organisations increasingly use technology to monitor employees and manage security risks, creating important questions about privacy, trust, transparency and proportionality.

The latest UK Cyber Security Breaches Survey 2025/26 provides a particularly useful contemporary context. Phishing remains by far the most common cyberattack identified by UK organisations, experienced by 38% of businesses, and was considered the most disruptive attack by 69% of businesses that had experienced a breach or attack.

Read and review the information provided by the ICO regarding data protection and monitoring workers