• Study data shows that 74% of Romanian employees fail the cybersecurity test, and managers are the most vulnerable.
Bucharest, May 7, 2026 – 3 out of 4 Romanian employees with digital exposure (74%) have an insufficient level of cyber literacy, and people with the most access to sensitive data – managers and entrepreneurs – lead the list of risky behaviors at work. Although the technical security infrastructure exists in most companies, behaviors in daily practice cancel out an important part of the investment in technology.
These are the main conclusions of "Cyber Literacy Audit 2026", the first national study dedicated to cyber literacy in professional activity. Conducted by the research agency MKOR for the company Arctic Stream, on a nationally representative sample of 1.000 employees (including 200 managers and entrepreneurs), it establishes the first national benchmark for employees' digital activity.
“The data from this study recalibrates a common perception in Romanian business, that cybersecurity is mainly solved by purchasing software. The operational reality shows otherwise: an inattentive employee can quickly compromise a significant investment in infrastructure. A critical aspect revealed by the research is that decision-makers are the ones who most often choose risky shortcuts, under the pressure of speed of delivery. Cybersecurity is today, above all, a topic of organizational behavior.” – Cori Cimpoca, Founder of MKOR
Hybrid digital infrastructure – the segment with the highest risk and the lowest reporting culture
Nearly half of employees in the study (44%) use a hybrid infrastructure, combining personal and corporate devices and accounts for work. This segment presents the highest risk profile according to this study:
- 69% transfer work documents through personal apps
- 48% connect personal storage to the company computer
- and the rate of reporting incidents to the IT department is only 37%, compared to 55% among those working exclusively on formal infrastructure
Thus, hybrid infrastructure combines access to sensitive data with uncontrolled tools and a personal inclination towards lower vigilance in the online space.
The gap between formal security and operational reality
At a declarative level, the image of Romanian companies suggests a solid cybersecurity framework:
- 91% of employees say there are active security measures in their organization
- 87% say there are procedures for unexpected situations
- and 84% said they signed specific internal documents
The operational reality, however, says otherwise. Antivirus remains the only measure recognized by the majority (71%), while VPN, multi-factor authentication (MFA) and USB restrictions remain below the 50% threshold.
Nearly half of managers (49%) admit that their organization acts reactively, only after an incident has occurred. And only 36% of employees have signed a remote work policy, even though hybrid working is a reality for a significant portion of the workforce.
"The fact that almost half of the organizations in Romania intervene only after an incident occurs is a serious alarm signal. In cybersecurity, reaction time is measured in seconds, not hours. A resilient organization does not wait for the attack, but anticipates it through continuous monitoring, testing and well-trained reflexes. Together with our clients, we invest precisely in this transition: from a reactive approach to operational resilience, through solid architectures, advanced technologies, optimized processes and teams prepared to respond effectively.
Through initiatives like Cyber Arena, we support the transformation of resilience from a theoretical concept into a practical capability. Here, teams develop and test their reflexes in simulations based on real attack scenarios. The results of this study confirm that real protection occurs when technology is complemented by human training and the psychological component of incident response.” – Ioana Manea, Chief Innovation Officer – Arctic Stream and General Manager – Cyber Arena Romania.
The paradox of decision-making power: managers are the main risk vectors
According to the MKOR and Arctic Stream study, those with the highest level of access to sensitive data, leaders and managers, are the ones who most frequently ignore or bypass security protocols to buy time. The data shows that managers adopt more risky behaviors than employees in executive functions:
- 31% use public Wi-Fi networks without a VPN (compared to 23% at the execution level)
- 33% enter internal documents into unauthorized AI tools (vs. 24% at execution)
- 43% frequently install unauthorized software on their company laptop
It is important to highlight that, at a perception level, managers are more aware of the risk of a cyberattack (24% rate it as high, compared to the overall average of 16%) and have greater procedural clarity (72% know what to do within 30 minutes of detecting an incident). The gap is therefore not one of knowledge, but of procedural discipline under the pressure of speed of delivery – a problem of behavioral governance, not awareness.
The full research report can be accessed at https://www.cyberarena.ro/cyber-literacy-audit-2026/
Methodology
The data presented comes from the "Cyber Literacy Audit 2026" study, conducted by MKOR for Arctic Stream, and provides a complete radiography of the digital maturity of the Romanian workforce.
- Sample: N=1000 employees from Romanian companies, of which 200 managers and entrepreneurs
- Representativeness: national, for the employed workforce in Romania (employees)
- Collection method: Online, via MKOR Panel
- Margin of error: +/- 3,1%, at a 95% confidence level
To ensure the accuracy of socio-economic representation, the sample was weighted post-stratification according to the most recent INS data, following ESOMAR standards. Data quality was checked automatically and manually based on 7 criteria (duplicates, straight-liners, completion time, consistency, etc.).
About MKOR
MKOR (https://mkor.ro/) is an innovative market research agency that combines hands-on business experience, MBA-level know-how and top expertise to provide an in-depth understanding of the business environment. In its work, MKOR covers all types of research and offers increased flexibility to its clients in order to understand and deliver the most detailed market insights.
With its own fish panel 80.000 Romanian respondents, MKOR combines agility with rigor to deliver solutions tailored to the challenges of Romanian businesses. MKOR helps you eliminate uncertainty from business decisions.
About Arctic Stream
Arctic Stream (https://www.arcticstream.ro/) is a fully Romanian-owned IT integrator specializing in on-premise and cloud infrastructure, cybersecurity and AI-based automation. Founded in 2017 and headquartered in Bucharest, the company designs, implements and operates critical IT infrastructures for organizations, from networks and data centers to hybrid architectures and advanced security solutions.
Listed on the Bucharest Stock Exchange, Arctic Stream offers full-service solutions, from audit and consulting to integration, maintenance and managed services, collaborating with global technology manufacturers. The company is constantly expanding its expertise through strategic stakes in Data Core Systems (cybersecurity), Optimizor (managed services) and Cyber Arena (advanced cybersecurity training).
About Cyber Arena
Cyber Arena Romania (https://www.cyberarena.ro/) is an advanced cybersecurity training center dedicated to training professionals and teams in critical infrastructure, government, and the private sector. Through realistic simulations and tailored attack scenarios, the company offers personalized training, supported by certified trainers, to improve response and resilience to cyber threats.
The company is a strategic partnership between Arctic Stream and Eximprod Engineering, two recognized players in the IT and energy fields, combining their expertise to create an innovative training ecosystem. To ensure the most efficient cybersecurity training programs, it collaborates with CybergymIEC, a global leader in cyber defense training.
Article source: Press Release
Read on White Art and: Rapid integration of artificial intelligence into the lives of Romanians: from 47% to 68% usage in a single year
