How we can help younger Australians tackle cybersecurity challenges

As we observe the twentieth Cybersecurity Awareness Month this October, the global "Annual Cybersecurity Attitudes and Behaviours Report, Oh, Behave! 2024" sheds light on an urgent issue: younger Australians are struggling with cybersecurity. The findings highlight a troubling trend—many young people feel overwhelmed and disconnected.

A nation growing weary of cybersecurity
One of the most alarming insights from the report is the increasing frustration Australians feel about cybersecurity measures. According to the report, 52% of Australians find online security frustrating, and 44 per cent feel intimidated by the complexities of staying safe online. Even more concerning, only 60% of Australians believe online security is worth the effort; down 9% from last year.

Cybersecurity is not an individual concern but a collective priority. However, as these figures demonstrate, many Australians feel overwhelmed and disengage from crucial security practices. If this trend is not reversed, it will create vulnerabilities that cybercriminals can exploit.

The problem with generational gaps
While frustration with cybersecurity spans age groups, the report clarifies that younger Australians, mainly Gen Z and Millennials, are increasingly pessimistic about their ability to stay safe online. Many have even reduced their online activity because they believe staying secure is no longer worth the effort, which is a dangerous trend. 

Younger generations are more digitally engaged than their older counterparts and should be at the forefront of secure online practices. Instead, complacency seems to have set in. Shockingly, 43% of participants assumed their devices were automatically secure, and 39% of younger respondents reported relying on family members to manage their cybersecurity. This over-reliance on others is a risky behaviour that leaves younger individuals vulnerable to cyber threats.

The digital world is complex and continually evolving, and younger Australians are, in some ways, taking charge of their use of new technologies. However, with this leadership role comes an urgent need for greater cybersecurity awareness and responsibility. More must be done to make cybersecurity feel manageable and worth the effort.

Breaking the Cycle of Poor Cyber Hygiene
The report reveals that poor cybersecurity hygiene remains widespread across all generations, but again, younger Australians are leading the way in risky behaviours. For instance, the use of personal information in passwords, such as pet names, has increased, with Gen Z having the highest percentage (52%). This is concerning because weak passwords are among the easiest ways cybercriminals access accounts.

Equally worrying is the inconsistent use of multi-factor authentication (MFA). While 81% of participants are aware of MFA, younger generations are less likely to adopt it consistently. Despite having used MFA before, many Millennials and Gen Z respondents have since stopped. Additionally, only 45% of Gen Z respondents have not enabled automatic software updates despite the convenience and security benefits these features provide.

These findings indicate that cybersecurity behaviours are not fully integrated into everyday habits. The challenge lies in creating a national culture where good cybersecurity practices are considered second nature, not a burden.

AI raises concerns
As if the current cybersecurity landscape wasn't complex enough, the rise of artificial intelligence (AI) adds a new dimension to the challenge. The report shows that over half of employed Australians (52%) and students (58%) have not received any training on the safe use of AI. 

Millennials expressed concerns about AI making it harder to detect scams. This concern is justified, given AI's ability to create increasingly sophisticated phishing attacks and deep fakes. Despite these worries, Australians have the lowest level of confidence (35%) in companies responsibly implementing AI, compared to countries like India, where trust levels are much higher (71%).

Australia cannot afford to fall behind in this critical area. As AI continues to evolve, individuals and organisations must understand its opportunities and risks.

A national call to action
The report is a wake-up call. Cybersecurity should feel empowering, not a frustrating IT problem but a societal issue affecting everyone. We need to show younger Australians how simple steps can make a big difference in their online safety.

As a nation, we need to shift the narrative from frustration and intimidation to empowerment and collaboration. This begins with education. We must drive national campaigns that help Australians understand that cybersecurity is within their control. While government, businesses and platform providers have roles to play, the responsibility ultimately falls on individuals to take steps to protect themselves.

The government, employers, education providers and parents need to engage with younger Australians in a way that resonates with them. It's not enough to tell them to be careful online; we must show them how cybersecurity can fit seamlessly into their digital lives.

Conclusion
The road ahead is challenging but not insurmountable. By raising awareness, promoting practical cybersecurity practices and building trust in emerging technologies like AI, we can create a future where Australians feel confident and secure in their online interactions.

We cannot afford to ignore the growing complacency among younger generations or underestimate the risks posed by poor cybersecurity habits. So, I am calling on all Australians to take responsibility for their online security. Together, we can foster a culture of resilience that protects our people and organisations and strengthens our nation's cybersecurity posture.