I'm always interested in the convergence of social issues, especially those relating to new technology and liability exposure. So a story that made the news today really hit all my hot buttons.

Cisco just came out with a report that finds 7 out of 10 young employees (another hot button!) frequently ignore IT policies regarding web security. Two-thirds said they believe their company's policies need to be modified, and about 61 percent said corporate IT security “isn't their responsibility,” placing the onus was on the employer or device manufacturers.

Seventy percent is a big number. And when you drill down further, the results get even scarier from a risk management perspective. Of the majority who ignore IT policies:

• About one-third said they did it because they didn't believe they were doing anything wrong
• About 22 percent did it because they needed to access unauthorized programs and apps to do their jobs
• About 18 percent said they do not have time to think about policies when they're working
• About 19 percent said they did it simply because the policies aren't enforced
• About 16 percent said following policy is inconvenient
• About 15 percent said they forgot to follow policy
• About 14 percent said they did it because their supervisors aren't watching them.

So what exactly are these Millennials doing online that is verboten by IT? (Hint: It isn't porn sites.) Of the most commonly restricted devices and apps:

• 37 percent cited online gaming
• 15 percent said Apple Inc.'s iPod
• 10 percent said iPads and tablets
• 31 percent said social networking sites like Facebook, Twitter and YouTube.

The study involved 1,400 college students aged 18 to 23, and 1,400 young professionals under age 30 –precisely the tech-savvy, socially engaged demographic that insurance industry recruiters find so desirable.