Though employees commit such missteps, employers must share the blame. The fact is that most companies aren’t putting enough money into training when they make technology investments. Organizations routinely spend as much as 85% of their IT budget on technology and only 5% on education and training for that technology.
The 2020 Penetration Risk Report also says cloud environments are most vulnerable to two types of attacks: security configurations and cross-site scripting. This year's report also found that large enterprises are 46% more likely to experience a data breach than large cloud providers.