New technology in the world of mobile phones and tablet computers means employees can increasingly use their personal handsets for work.
However, IT security consultant Kevin Wharram explained many companies do not properly communicate the importance of keeping data safe to their workers.
He explained businesses could be hit with a fine if personal data is lost or exposed, as well as having to face the embarrassment of the situation.
Therefore, they must discuss the matter with their staff members, even if they work on the go using a mobile device.
"The key to effective IT security education is [to] have an ongoing commitment," Mr Wharram said. "Education should be visual and it should apply to users outside of the office."
His comments come after research conducted by Sophos found 96 per cent of IT professionals do not trust end users to make good decisions when it comes to the security of data.