"Ransomware was also among the top three questions people answered incorrectly, which is a concern given we are increasingly seeing businesses held 'ransom' by cyber attackers who lock down an organisation's data until a fee is paid," Mr Ash said.
Only around 70 per cent know the definition of ransomware, and fewer still are familiar with two-factor authentication. A lowly 25 per cent are unable to identify the indicators of a secure website.
The focus of this third Connect Smart Week was cyber security in the workplace. During the week, organisations across the country ran campaigns to help employees protect themselves online and prevent cyber incidents.
Mr Ash said the good news is that help is available with a range of resources for individuals and businesses on the Connect Smart website - www.ConnectSmart.govt.nz.
"Cyber security is a 24/7 issue. It's important that organisations and employees remain focused on staying secure online all year round," he said.
"It isn't complicated. A few basic steps can mean your personal information or your work information is more secure," he said.