Research & Reports

2023 Not (Cyber) Safe for Work Report

Agency surveyed executives nationwide on how personal-device habits expose their companies. The takeaway: the riskiest gaps need human judgment, not just another tool — which is why companies hire Agency as their security and compliance team, without the headcount.

Get the paper Talk to an Expert

What the report covers

BYOD security Insider risk Remote workforcePersonal devicesPhishing

Agency Research · Executive survey Not (Cyber)Safe for Work How personal-device habits expose companies — a nationwide survey of executives.

Get the paper The full paper is published on this page — no form, no gate. Jump straight to it. Get the paper

Instant access — sent straight to your inboxFour findings every executive should seeWhat Agency operates to close the gaps

No spam. Unsubscribe anytime.

Agency Research · 2023 Report Free paper

The riskiest gaps need human judgment.

Impact Studies · Research & Reports

/0.1

Key Findings

From a nationwide survey of executives

99%of C-level respondents report accessing work accounts from personal devices; 97% of respondents access work accounts or applications via their personal devices.

88%of respondents sometimes or often receive work-related spam or phishing on personal accounts, with respondents from mid-size companies (700 to 999 employees) more likely to receive work-related spam than those from larger companies (1,000 to 3,999 employees).

80%of C-level respondents are likely to send work-related messages, i.e., emails or texts, from their personal devices — more than any other group — with 74% of respondents overall sending work-related messages from their personal devices "frequently/often."

30%of respondents say no one else has access to their personal devices. 58% of respondents say their spouse/partner has physical access to their personal devices, as well as children (38%), friends (18%) and parents (10%).

/0.2

How Agency Helps

These risks don't get solved by software alone. Agency's U.S.-based forward-deployed engineers, supercharged by AI, run BYOD and insider-risk programs end-to-end — on top of the tools you already use.

/0.3

The challenges this report maps to — and who feels them most

Challenges BYOD Security Insider Risks Remote Workers Policy & Access

Get the paper

2023 Not (Cyber) Safe for Work — the full report.

The complete survey of executives nationwide on how personal-device habits expose their companies.

Get the paper Free · sent straight to your inbox

Inside the report

Personal devices at workHow often executives and employees reach work accounts, messages, and applications from personal devices.

Phishing on personal accountsWhere work-related spam and phishing land — and which company sizes see the most of it.

Who else has accessSpouses, partners, children, friends, and parents with physical access to the devices that reach your systems.

Platform Products

Agency MDRManaged detection and response CustodyIDIdentity verification for trust and compliance Agency AIEnd-to-end cybersecurity and compliance, across the stack you already use.

Find your auditor

Auditnex makes buying audits simpler and more transparent.

Agency implements the controls, collects the evidence, and manages your auditor relationship on top of the GRC tools you already use.

Explore Auditnex

Common GRC Questions

GRC Platform & Virtual CISO FAQ

Answers to common questions about remote and personal-device risk — what to control, what to monitor, and what a virtual CISO actually does for your program.

Read the FAQ

More impact studies & resources

See it on the home page

Customer case studiesGorgias Coalesce CloudCover Popp

Research & reportsRegulatory Shadows2023 Not (Cyber) Safe for Work ReportCatching a North Korean Hacking Attempt

Compliance resourcesSeries Overview SOC 2 Guide ISO 27001 Guide SOC 2 Checklist ISO 27001 Checklist

AI-Powered

Build a Security & Compliance Team Led by Your Own Virtual CISO

Forward-Deployed Engineers + AI that lower costs, increase velocity, and raise the bar — from policy to audit to remediation. U.S.-based forward-deployed engineers, supercharged by proprietary AI, operate your program end-to-end — on top of the tools you already trust.

Talk to an Expert Automation ends where judgment begins.