According to a study by Kaspersky, 15% of companies globally have been exposed to cyber attacks in the last two years due to inadequate cyber security investment. Critical infrastructure, oil, gas and energy companies were the organizations that experienced the highest number of cyber incidents due to insufficient budget allocation (25%). When considering the financial health of companies globally, one in five (21%) admit that they do not have the budget for adequate cybersecurity measures.
Kaspersky surveyed IT security professionals working in SMEs and enterprises around the world to find out their opinions about the impact employees have on the company's cybersecurity. Aiming to gather information on employee groups that impact cybersecurity, this research considered both internal staff and external contractors. The impact of decision makers on cybersecurity in terms of budget allocation was also analyzed.
Accordingly, not allocating sufficient budget for cyber security caused 15% of companies worldwide to be exposed to cyber incidents in the last two years. This situation developed at different rates for each sector. For example, critical infrastructure, energy, oil and gas companies were the organizations most exposed to cyber breaches due to lack of budget (25%). However, in some sectors, cyber incidents occurred at a rate less than the global average of 15%. For example, the telecommunications sector experienced 13% of cyber incidents due to budget constraints, while the transportation, logistics and financial services sector experienced 8% each.
When asked about the budget allocated for cybersecurity measures, 78% of respondents worldwide stated that they are equipped to keep up with and even prevent new threats. However, 21% of companies are not doing so well in this regard, and 18% report that the company does not have sufficient funds to properly maintain its infrastructure. Same zamCurrently, there are companies that do not allocate any costs for cyber security. 3% of companies say they do not have a dedicated budget for their cyber protection needs.
Is there a budget allocated for cyber security measures in your company?
Many companies said they are willing to take steps to strengthen their cyber security in the next 1-1,5 years. One of the most popular investment areas is threat detection software (40%) and training, with 39% of companies planning to allocate a budget for training programs for cybersecurity experts and 38% for training general staff. close to companies zamOther popular measures they plan to take at the moment include endpoint protection software at 36%, hiring new IT professionals at 35%, and adopting SaaS cloud solutions at 34%.
Kaspersky Vice President of Enterprise Products Ivan Vasunov, said: “Today, companies must align their cybersecurity investments with their business strategies and consider cybersecurity as one of their business goals. Of course, investments must justify themselves and be effective. Therefore, the information security department is the same zamHe or she now faces the task of increasing the return on investment in information security and defending the investments to senior management or the board of directors. In addition, information security is responsible for reducing the mean time to detection (MTTD) and mean time to response (MTTR), as well as reducing the cost of security incidents. These challenges can be overcome using various modern approaches and technologies. For example, we are investing to enhance our SASE portfolio, as well as XDR and MDR, with integrated AI, machine learning, automated detection and response, automated threat research, out-of-the-box integrations, and much more. To ensure process transparency and prove the value of our solutions, we offer specific dashboards and reports for C-level executives with information on how many incidents we prevented, how quickly incidents were investigated, and the effectiveness of cybersecurity solutions deployed throughout the organization. “We also highlight customer-specific risks and reveal industry-specific trends, helping them shape their cybersecurity around current dangers and justify their investments in technology.”
You can access the full report and more information about the impact of cybersecurity on employees in the business world at this link.
To get the most out of your cybersecurity budget, Kaspersky recommends:
- Use cybersecurity products with advanced anomaly control, such as Kaspersky Endpoint Detection and Response Optimum. This helps prevent potentially dangerous 'out of the norm' activities initiated by both inside users and attackers who have gained control of the system.
- Use easily manageable solutions. Kaspersky Endpoint Security Cloud is designed for small businesses and companies that cannot afford large-scale cybersecurity products. An all-in-one SaaS console allows a single administrator to manage a wide range of cybersecurity tasks from one place with a simple and easy-to-master workflow.
- Invest in training for everyone in your company, from general staff to decision makers. Kaspersky Automated Security Awareness Platform training teaches employees safe internet behavior and provides simulated phishing attack exercises. Same zamCurrently, the Kaspersky Cybersecurity for IT Online training helps establish simple yet effective IT security best practices and simple incident response scenarios for general IT administrators; Kaspersky Expert Training protects your organization against even the most sophisticated attacks by equipping your security team with the latest knowledge and skills in threat management and mitigation. Finally, you can increase security engagement with Kaspersky Interactive Protection Simulation, which offers advanced C-level professional training to ensure decision-makers better understand the importance of cybersecurity and how to best allocate their budgets to stay ahead of threats.
- Consider getting help from experts. For example, Kaspersky Assessments family of professional services identifies vulnerabilities in system configuration and security architecture design helps create an excellent IT security infrastructure for the company. Each step of the implementation is based on real security needs and provides convincing arguments for decision-makers to allocate budget in this area.
- For tips on how to spend less on IT without compromising security, check out Kaspersky's "Cybersecurity on a budget" resource for small and medium-sized businesses.
Source: (BYZHA) Beyaz News Agency
