Exclusive: AUS 3C report reveals how different generations stay secure

The Australian Cyber Collaboration Centre (AUS 3C) has released a global cybersecurity report, shedding light on the behaviour and attitudes of different generations towards online security.

During an interview with TechDay, CEO Matt Salier highlighted the importance of understanding how consumers interact with cybersecurity measures ahead of Cyber Security Awareness Month in October.

The report, conducted by Cybersafe in conjunction with the US National Cyber Alliance (NCA), surveyed over 6,500 participants from countries including Australia, the US, the UK, Canada, and Germany.

"It provides a broad spectrum of insights into cybersecurity sentiment around the world," Salier said.

One of the key findings from the Australian cohort, which included 1,012 respondents, was the complacency exhibited by younger generations, particularly Gen Z and Millennials.

"They know they should be doing something, but they often stop short due to inconvenience," Salier explained, referencing the report's insights on password managers and multi-factor authentication (MFA) adoption.

"These generations have the highest adoption rates of password managers and MFA but also the highest attrition rates."

Salier explained that these younger digital natives are often well-versed in using technology but struggle with sustaining secure online behaviours due to the perceived complexity and inconvenience. "What we are seeing is a generation that understands the tools but is less inclined to use them consistently," he added.

Australians also find online security frustrating, with 52% of respondents expressing frustration over the complexity of staying safe online. Additionally, 44% feel intimidated by the challenges of online security, which contributes to the declining perceived value of taking security measures. Alarmingly, only 60% of Australians believe online security is worth the effort, a 9% drop from last year.

Another standout statistic from the report showed that 30% of Gen Z and Millennials surveyed feel hopeless about their ability to protect their personal information online, believing that their data is already compromised. "It's troubling to see this kind of shared hopelessness," Salier said. "They've given up on their ability to safeguard their information, which is a dangerous mindset."

In contrast, older generations such as Gen X, Boomers, and the Silent Generation exhibited a more consistent approach to online security, despite some areas of concern, such as continued use of simple, easily guessable passwords. "The older generations are more consistent in their approach to security, even if their methods aren't always the most robust," Salier noted.

The global nature of the survey also allowed for a comparison between nations, with some surprising differences. For instance, while only 35% of Australians trust tech companies to responsibly integrate artificial intelligence (AI) into their tools, in countries like India, that figure was over 70%. "The lack of trust in Australia likely stems from a combination of factors, including the absence of strong regulation and transparency from tech companies," Salier said.

AI has also become a growing concern, with 38% of younger respondents admitting to using AI tools with sensitive work information without their employer's knowledge. Despite the risks, more than half of all survey participants had received no formal training on how to use AI safely. "AI enables more sophisticated threats, yet the education around its safe and effective use simply isn't keeping pace," Salier warned.

The report's findings highlight a critical need for improved cybersecurity education, particularly as AI continues to reshape the threat landscape. "There's a huge gap between the adoption of AI tools and the understanding of how to use them safely," Salier said. He emphasised the importance of a balanced approach to AI governance, combining education with appropriate regulation. "We need frameworks in place to ensure these tools are used responsibly."

One of the more concerning trends emerging from the report is the increase in the use of simple passwords, particularly among younger generations who rely on easily memorable personal information, such as pet names, for their passwords. "This practice is risky, and younger generations are more prone to it because they prioritise convenience over security," Salier said.

According to the report, 52% of Gen Z respondents use personal information like pet names for passwords. However, Salier offered a simple solution: "Combining different personal elements into a passphrase makes it much harder for criminals to guess, especially if it's supported by multi-factor authentication."

In addition to stronger password habits, Salier also recommended regular software updates, a practice that younger generations often neglect due to perceived inconvenience. "Software updates are critical for patching security vulnerabilities," he stressed. "It's frustrating that such a simple action is often overlooked." The report revealed that 45% of Gen Z respondents have not enabled automatic software updates, even though most applications offer this as a convenient security feature.

A lack of reporting on scams was another area of concern revealed by the report. "People encounter scams and often don't report them," Salier said. "It's crucial to report every scam, as this helps authorities identify patterns and protect others from falling victim."

As organisations increasingly adopt AI and other emerging technologies, Salier advised Australian businesses to focus on education and the development of clear AI usage policies.

"A large portion of the workforce is already using AI without formal training," he explained. "Organisations need to implement training and discussions around what acceptable AI use looks like."

For individuals, Salier offered a simple checklist to bolster online security: adopt multi-factor authentication, use passphrases rather than simple passwords, install software updates regularly, and back up important data. "These are basic but effective steps anyone can take to protect themselves online," he said.

The Australian Cyber Collaboration Centre continues to support initiatives aimed at improving cybersecurity practices and raising awareness. Salier stressed the need for continuous education: "We've got a lot of work to do in addressing the challenges laid out in this report, particularly when it comes to ensuring that younger generations adopt and maintain secure online behaviours."

As Salier reflected on the report's findings, one trend stood out: "The contrast is clear—Gen Zs and Millennials are adopting security tools faster than anyone else, but their attrition rates are also the highest."

"We need to reduce the friction causing this drop-off if we want these positive behaviours to stick."