Communications Minister Amy Adams says businesses need to up their game after a survey found fewer than one in five people were given advice on cyber security by their workplace.
The Government-commissioned Colmar Brunton survey found two in ten people had been victim to a cyber crime such as a virus, online scam, hacking, or ransomware lockdown and seven in ten had experienced an issue such as spam or a phishing email.
While awareness of the risk from suspicious emails was high at 91 per cent, 41 per cent said they did not know what steps they should be taking to address the risks.
The online survey of 1000 respondents showed only 17 per cent had been given any advice or training from their workplace.
Adams released the survey at the launch of Connect Smart Week, which was focusing on cyber security at work. She said cyber crime now had a global cost of $600 billion a year.
"All employers and employees should understand their role in protecting the information that belongs to their workplace.
Phishing emails and ransomware are increasing and employees are key to preventing security incidents in the workplace."
While three quarters said they took some steps to manage cyber security, that was down from 84 per cent in the same survey in 2014.
Fewer people were taking basic steps to reduce the risk compared to 2015.
Only 64 per cent said they installed or updated security software - down from 70 per cent last year.
63 per cent said they changed passwords regularly, down from 68 per cent, and 56 per cent said they checked their social media privacy settings - down from 60 per cent.
Last year, an estimated 856,000 New Zealanders were victim to online crime at a cost of $257 million.
The Government's cyber crime strategy was launched in December and included the establishment of a 'computer emergency response team' for organisations needing help, more cyber crime offences in the law, and a 'tick' scheme to identify businesses with good cyber security practices.
The poll of 1000 online users is weighted by age, gender nd region and has a margin of error of +/- 3.1 per cent.