Thursday, 19th September 2019

Security breaches hit SMBs

Nearly one-third (32%) of IT group employees in SMBs and mid-market enterprises globally said their organisation had experienced a security breach in the past five years, with at least 10% of the total sample of respondents reporting that they were hit by a breach in the past year. That’s according to a new survey conducted by Kaseya which polled more than 400 global respondents.

The study identified that just under half (42%) of respondents automate or plan to automate patch management and, similarly, just 42% monitor third party software and apply critical patches within 30 days.

The survey also highlighted a strong correlation between outages and data breaches. Just under two thirds (61%) of respondents who had a security breach last year also had two to four outages, a 15% increase from 2018. Overall, improving security is the top IT priority for more than half (57%) of SMBs, up from 54% in 2018 and 40% in 2017.

“In a world where cyber-attacks are becoming increasingly sophisticated and high-profile breaches more prevalent, it is no surprise that SMBs and the mid-market have a strong focus on security issues,” said Mike Puglia, chief strategy officer, Kaseya. “However, our survey shows that there is still a lot for them to do. The lack of automated patching in place is a serious concern as is the prevalence of breaches and their correlation with the outages that organisations suffer.”

The survey did find, however, that nearly 90% of respondents backup their servers. Backup to the cloud in combination with the other media is among the top five business continuity and disaster recovery (BCDR) strategies, adopted by 33% of the respondents. Concerningly, however, only 29% of respondents back up their SaaS application data, showing no improvement from 2018.

“The adoption of modern information technology solutions has the ability to transform the structure and daily operations of today’s IT teams, allowing companies to offer a greater variety of solutions and higher levels of service to their customers” added Puglia.

“As these technologies mature into the 2020s, the playing field will continue to level as midsize businesses and smaller IT organisations leverage more powerful tools to compete with their large enterprise counterparts.” Puglia concluded: “With these new tools, IT teams can meet the challenges of ever-increasing customer expectations and security threats that demand constant innovation and operational improvements from frequently overworked staff.”

Findings reveal that 37% of respondents have reported an incident to the ICO in the past 12 months,...
Two-thirds of enterprises are s.truggling to embed security in the enterprise-IT architecture
Ping Identity has published two new white papers from its CISO Advisory Council on securing customer...
While only a third say regulatory change triggers purchase of new technology.
Respondents identify people as biggest source of cyber threats, with Facebook and BA as most notable...
Research reveals that companies investing in the latest cyber security products and services are ris...
New levels of industry collaboration will protect and secure people, processes and technology.
IBM Security has published the results of its annual study examining the financial impact of data br...