Webroot, the Smarter Cybersecurity company, has announced the results of a new global report, ‘Webroot SMB Cybersecurity Preparedness.’ Webroot found that businesses are taking cybersecurity seriously, with almost 100 per cent of respondents conducting some form of employee cybersecurity training. However, despite these efforts, 79 per cent say they aren’t completely ready to manage IT security and protect against threats.
In a study of 600 IT decision makers (ITDMs) at small-to medium-sized businesses (SMBs), Webroot found that the attacks organisations believed themselves to be most susceptible to in 2017 are rapidly shifting in 2018, while the estimated cost of a breach is decreasing.
· Most Dangerous Threats Evolving: Phishing displaces new forms of malware globally as the No. 1 attack that ITDMs believe their organisations are most susceptible to in 2018.
· Top Threats Vary by Country: US ITDMs think their business will be most susceptible to phishing threats (56%), while the UK fears ransomware attacks (44%) and Australia DNS attacks (52%).
o SMBs in the UK are significantly less concerned about DDoS attacks (17%) than the US (52%) and Australia (49%).
· Training Isn’t Continuous: Although almost 100 per cent of businesses train employees on cybersecurity best practices, that figure drops to half or a third when asked about training ‘continuously,’ which is vital for effectiveness. This leads to the next stat, 79 per cent can’t say they are ‘completely ready to manage IT security and protect against threats.’
o UK businesses (26%) are more likely to only conduct security training after a data breach takes place compared to those in the US (9%) or Australia (19%).
· The Cost of a Breach Drops: While breaches continue to proliferate, the estimated cost of a breach may be on the decline. £305,357 in the UK – a 59% decrease from 2017.
Charlie Tomeo, Vice President of Worldwide Business Sales, Webroot said,“as our study shows, the rise of new attacks is leaving SMBs feeling unprepared. One of the most effective strategies to keep your company safe is with a layered cybersecurity strategy that can secure users and their devices at every stage of an attack, across every possible attack vector. And for many businesses, relying on a managed service provider (MSP) when time and expertise aren’t readily available is a crucial step to strengthen their security efforts.”
Cybersecurity Guidelines for Small to Medium-Sized Businesses:
• Always Be Educating: With threats continuously evolving, so must employee cybersecurity training.
• Don’t Forget About Mobile: Find a balance between providing employees corporate access and ensuring information security requires device control policies, device-level security and mobile workforce security training.
• Email from My Boss or My Attacker? Even if the sender looks familiar, be sure to check the senders email address is legitimate and don’t click unknown links in social media, email, or text.
• Evaluate Your Risk Profile: If you don’t have the expertise, an MSP can assess your security posture and work with you to develop a plan for ongoing risk mitigation.
• Plan for the Worst: Develop a data breach response plan that includes security experts to call and a communications response plan to notify customers, staff, and the public. Make sure you are regularly backing up your data with hard data and offline versions. Remote computer backup could be vulnerable from ransomware and other threats if not ‘air gapped’.
View the Report: Webroot SMB Cybersecurity Preparedness