Similarly, those who received security training were also more likely to take information with them when they leave a job.
That doesn't necessarily mean that security training causes employees to behave badly, said Diane Hagglund, principal researcher at Dimensional Research, the company that conducted the survey.
"The survey results do show that required cybersecurity training goes hand-in-hand with increased tendencies towards information sharing, and this is an unintuitive finding for us," she said. "However, we would emphasize that this is correlation – not necessarily causation."
For example, there might be other factors involved. For example, companies where employees engage in risky behaviors may be more likely to have security training.
"It would be irresponsible to definitely conclude that training efforts directly result in worse employee behavior," she said.
Sign up for CIO Asia eNewsletters.