Of all the cyber-security risks companies must face, the biggest might be right under their noses–senior management. That’s the claim of global investigations and risk services company Stroz Friedberg after parsing the results of its latest survey.

As companies look for solutions to protect the integrity of their networks, data centers, and computer systems, “an unexpected threat” emerges from executives, the survey, released on Tuesday, says. It found that 87 percent of senior managers “frequently or occasionally” send work materials to a personal email or cloud account to work remotely, putting that information at a higher risk of being breached. It also found that 58 percent of senior management reported having accidentally sent the wrong person sensitive information, compared to just 25 percent of workers overall.