N AT I O N A L CY B E R S ECU R I T Y ST R AT EGY © shutterstock 12 Cyber Security Culture and Innovation 23. The third target of the Strategy is to promote cybersecurity culture and innovation. 24. It is impossible to avoid cyber incidents in the modern-day world, even if all existing cyber security measures are to be applied. For this reason, public and private sector representatives must improve cybersecurity culture of their employees. According to IBM report published in 20176, the number of cyber incidents caused due to employee negligence has been growing (in 2017, the number of such cyber incidents constituted more than 20%, in 2016 – 15%). More than 30% of these cyber incidents happened because employees opened malicious links or documents sent to them via email. In Lithuania, the number of emails created using social engineering methods has also been rising.7 25. According to the European Innovation Scoreboard dated 2018, private sector representatives in Europe have been increasing their focus on ICT training of their employees. While Europe as a whole has an average index of 21%, in Lithuania it is slightly greater than 10%. Civil servants in Lithuania are given opportunities to improve their skills in the field of cyber security and the number of civil serv- ants who have taken cybersecurity courses is growing annually. According to Civil Service Department, there were 146 such civil servants in 2015, 249 – in 2015 and 289 – in 2017. Routine and regularly updated training courses for private and public sector employees would increase employees’ duty of care as well as the overall cybersecurity culture. 26. Efficient and regular dissemination of information on the latest cyber incidents and other factors that may cause personal data breach or pose a risk of becoming a victim of cybercrime is a key measure for strengthening cybersecurity culture of the Lithuanian people. According to the special Eurobarometer survey 464a which reveals Europeans’ attitude towards cybersecurity, only 16% of the internet users in Lithuania believe that the risk of becoming a victim of a cybercrime has not been increasing (the European Union average is 11%). Nevertheless, as 49% of the internet users in Lithuania 6 (2018). IBM. IBM X-Force Threat Intelligence Index 2018 National Cyber Security Centre under the Ministry of National Defence (2018). National Cyber Security Status Report 2017. 7