When it comes to cyber security, confidence is high — perhaps too high.
According to QBE’s 2025 Cyber Research Report, a growing number of Australian employees feel sure they can spot and avoid online threats. But that confidence might be the very thing putting businesses at risk.
At Arbor Insurance, we help small and medium businesses across the Redlands Coast and beyond protect themselves against the unexpected. And QBE’s latest findings give every business owner a reason to pause and reassess their digital habits.
1. Over-Confidence Is Common — and Costly
QBE’s research found that 60% of employees believe they’ve never made a cyber mistake, while 86% feel confident they can identify cyber threats.
That sounds reassuring — until you consider that most successful cyber-attacks begin with simple human error. Clicking a phishing link, ignoring an update, or reusing a password might not feel dangerous, but it’s often the first domino to fall.
At Arbor, we see this every day when helping businesses recover from cyber incidents. The risk isn’t just in the software — it’s in our behaviour.
2. Gen Z: Digital Natives, But Not Digital-Safe
The report also uncovered something surprising: younger workers, often labelled “tech-savvy”, are statistically more likely to take risks online.
QBE found that 55% of Gen Z employees ignore security warnings, and 72% reuse passwords across multiple accounts. In workplaces where younger and older employees share systems, this creates a unique challenge for IT teams and managers.
That’s why modern cyber training needs to go beyond “click here, don’t click there.” It’s about reshaping daily habits — and ensuring everyone, from interns to owners, understands their role in protecting the business.
3. Accountability Belongs to Everyone
When asked who they’d blame for a data breach, most employees pointed the finger at their IT department (31%), while only 13% thought leadership should be held responsible.
This mindset shows why culture matters just as much as software. Cyber resilience starts from the top — with directors, managers, and business owners setting clear expectations, enforcing regular updates, and leading by example.
Arbor Insurance supports businesses by helping them create a layered approach: governance, behaviour, and financial protection through insurance.
4. Transparency Builds Trust
QBE’s research also highlights how customers respond after a breach.
More than one-third of Australians (34%) said transparency is the most important factor in rebuilding trust — far outweighing how quickly a company recovers.
For younger customers, forgiveness is even harder to earn: just 37% of Gen Z say they’d give a company a second chance after a cyber incident.
That’s a powerful reminder that communication is a critical part of any incident response plan. Businesses should be ready to speak clearly and honestly if a breach occurs — and ensure their insurance coverage supports that process.
5. Cyber Insurance as a Resilience Tool
Cyber insurance is evolving rapidly. QBE’s report reinforces that it’s not just about financial reimbursement after a loss — it’s about resilience.
A strong cyber policy can include access to response experts, forensics, legal support, and crisis communication resources. It’s a practical safety net that helps businesses recover faster and stronger.
At Arbor Insurance, we believe that true cyber resilience is built on three pillars:
✅ Cover – having the right insurance in place.
✅ Governance – ensuring leadership takes responsibility.
✅ Culture – shaping safe digital habits across your team.
Final Thoughts
QBE’s 2025 Cyber Research Report is a wake-up call for businesses of all sizes: the greatest vulnerability isn’t always your technology — it’s your people.
If your business hasn’t reviewed its cyber readiness recently, now’s the time.
Let Arbor Insurance help you assess your exposure, strengthen your response plan, and find a cyber policy that fits your business perfectly.
📄 Source:
QBE Insurance Group – Cyber Research Report 2025
Read the full report here: https://www.qbe.com/newsroom/news/qbe-cyber-research-report-2025