CSA research shows Singaporean cyber hygiene improved in 2017

The Cyber Security Agency of Singapore's (CSA's) annual survey for 2017 has revealed improved uptake in good cybersecurity practices by respondents, namely in enabling two-factor authentication (2FA), and exercising caution when it comes to online transactions and app downloads. 

Source: CSA. Depicted are the aggregated percentages for level of concern – "moderately concerned" and "extremely concerned" or  likelihood of happening, combining figures for "somewhat likely" and "extremely likely", in answer to the questions "To what extent are you concerned about the following scenarios? How likely do you think the following scenarios will happen to you?". Base in 2016: n = 2,000; in 2017: n = 2,035.

The survey seeks to measure public awareness and adoption of cyber hygiene practices, so as to better aid in developing initiatives to bridge knowledge gaps. According to the CSA, more respondents are aware of what 2FA is, as there is a six percentage point drop in the proportion of respondents who are “not sure” of this authentication process, down from 10% in 2016. This could also be a reason why more respondents indicated that they had enabled 2FA for either some or all accounts, resulting in a significant increase of 13 percentage points from 66% in 2016.

More respondents are exercising caution when it comes to online transactions and app downloads. The proportion of respondents who proceeded with online transactions without first checking the authenticity of the websites dropped by 18 percentage points, from 38% in 2016 to 20% in 2017. Fewer respondents are also connecting to open, non-password protected Wi-Fi networks in public places, with a decrease from 37% in 2016 to 25% in 2017. In addition, there are fewer respondents who indicated that they had never scanned for viruses before opening or using downloaded files or external devices - a 30 percentage point drop, from 41% in 2016 to 11% in 2017.

The findings also showed a 7 percentage point increase in the number of respondents who downloaded mobile applications from official app stores*, from 83% of respondents in 2016 to 90% in 2017.

When it comes to password security, there has been no improvement in password management habits in 2017 as compared to 2016. About one in three respondents continue to store their passwords in their computer or write them down, or use the same password for work and personal accounts. From a given list of passwords, only 45% of respondents are able to identify a strong password of at least eight characters comprising upper and lower-case letters, numbers and symbols in 2017. Over six in 10 respondents do not change their passwords regularly, or did so only when the system prompted them to.

Source: CSA. Results of asking "How often do you change your passwords for the following accounts?". Base in 2016: n = 2,000; in 2017: n = 2,035.

While 94% of respondents indicated that they update their PC software, 41% do not update it immediately or as soon as possible. Likewise, 97% of respondents with apps on their mobile devices update their mobile software, but 38% do not update it immediately or as soon as possible.

Respondents’ levels of concern towards cyberthreats, such as having their devices infected by viruses or malware, their financial or personal information extracted without their consent, and falling victim to a scam or fraud – saw a slight dip. But while seven in 10 are concerned about these threats, less than half of them feel that the scenarios will happen to them.

When asked if they would agree that all Singaporeans have a role to play in cybersecurity, seven in 10 respondents agreed with the statement. When polled on the type of information that they would like to see, general tips on cyberecurity and information on privacy and data protection emerged as the top two categories of information respondents are keen to know more about (21% and 19% respectively). Another 21% indicated that they are not sure, while 18% indicated that they do not want to see any security information.

To continue to encourage adoption of good cybersecurity practices, CSA has launched its second cybersecurity public awareness campaign - Cyber Tips 4 You - with a series of online videos, advertisements and posters, featuring local celebrities Suhaimi Yusof and Jae Liew from the cast of television drama Tanglin. The two celebrities will provide four simple cyber tips to viewers, namely 

1 Use antivirus software

2 Use strong passwords and enable 2FA

3 Spot signs of phishing, and 

4 Update your software as soon as possible.

David Koh, Chief Executive of CSA, said, “It is heartening that a majority of respondents recognise that everyone should be concerned about cybersecurity. However, we need to translate this recognition into action. Cyberthreats show no sign of abating. While we will continue to provide cybersecurity understanding and knowhow to the community, we must recognise that we all have a part to play to protect ourselves online and not fall prey to cybercriminals.”

Details:

A launch event will be held on 5 May 2018 at Bedok Mall where visitors can get tips on how to create strong passwords as well as information on antivirus software and how it works.

*Examples include the Google Play Store and Apple App Store.