Millennial behavior puts federal IT systems at risk

The security habits of the millennial generation could be putting federal IT systems at risk, if agencies don't adjust their cyber defenses in time.

This finding comes from a new study by cyber security company Forcepoint, which examines how members of the millennial generation use technology.

Millennials currently make up about 25 percent of federal employees and are expected to represent nearly 75 percent of the workforce by 2025. But while baby boomers are more cautious online, the survey data shows that millennials (those born between 1977 and 1994) are more likely to abandon caution for digital expediency.

Federal organizations face millennial workers who believe they are sufficiently educated and confident in security knowledge. Yet the survey's data reveals many do not practise safe behaviors when it comes to technology and the workplace. Millennials acknowledge they use personal devices for both work and play, with nearly a quarter downloading company files and third party apps to personal devices to increase productivity without notifying IT. In addition, while millennials claim to understand and use strong passwords, the results show they frequently use the same passwords for multiple systems and apps and share them with others even after having personally experienced a breach.

Forcepoint also surveyed federal IT security officers on how they are adapting their efforts. Current changes primarily relate to flexible scheduling and accessing information on mobile devices.

Changes being made on an agency by agency basis include security awareness programs that emphasize secure productivity, and updating BYOD programs with tools allowing for greater visibility by monitoring applications' reach and data flows.

"Beyond the security of the apps and devices employees bring to federal networks, agencies should also look at employee motivations, taking into account both productivity gains and potential security risks," says Forcepoint's chief strategy officer and federal division president, Ed Hammersla. "The data resulting from the survey highlights important attitudes and risk factors that can help agencies adapt cybersecurity programs with millennials in mind, fully capitalizing on their creativity and energy while preventing them from becoming accidental insider threats".

The full report is available from the Forcepoint website and there's a summary of the findings as an infographic below.

Photo credit: Andrea Izzotti / Shutterstock