Cybersecurity risks in internship programs: Intern training gaps and organizational vulnerabilities

Cybersecurity threats are increasing as organizations navigate digital transformation and hybrid work models, with human error accounting for 95% of security breaches and the human factor emerging as the critical vulnerability in organizational security. Interns, as transient organizational members, remain underexplored regarding their role in cybersecurity risk. This study investigates cybersecurity training and awareness among 75 interns from organizations in Spain. We assess sources -formal instruction, on-the-job learning, and informal guidance-, content, and adequacy of cybersecurity education received, and examine their awareness of organizational cybersecurity protocols, practices and incident response procedures. Our findings reveal significant gaps in formal training programs and communication of internal cybersecurity policies, leaving many interns poorly prepared to address cybersecurity threats. Demographic analyses further reveal that age and gender differences affect confidence and risk perceptions. The results indicate that insufficient onboarding and inadequate training contribute to elevated cybersecurity risks. This research underscores the urgent need for enhanced cybersecurity education and robust onboarding procedures for interns. The implications extend to improved risk management strategies and a stronger overall cybersecurity culture in organizations.