Survey Finds Security Gaps at Mid-Sized Businesses

Summary
A survey of 250+ mid-sized businesses in the US and Canada found gaps in incident response, cybersecurity staffing and employee training; nearly one-quarter reported a cyber attack or were unaware of one.
Key points
- The survey covered more than 250 private-sector mid-sized businesses in the US and Canada.
- Nearly 24% of respondents said their organization had suffered a cyber attack in the past year or that they were unaware whether one had occurred.
- 47% reported having no incident response plan, and 61% said they lacked dedicated cybersecurity experts.
- 59% said they conduct regular formal security awareness training, while the article also reports that over 40% do not.
Article Details
- Publisher
- Huntress
- Report Period
- 2023
- Scope
- Cybersecurity posture and practices of mid-sized private-sector businesses in the US and Canada
- Sample Size
- 250+ mid-sized businesses
- Key Statistics
- 24% of respondents had experienced a cyber attack or were unaware of an attack on their organization in the previous year.
- 47% reported having no incident response plan.
- 61% reported having no dedicated cybersecurity experts.
- 59% conducted regular formal security awareness training.
- Recommendations
- Prioritize formal cybersecurity awareness training to help employees recognize and avoid potential threats.
Countries
Canadasurveyed 250+ mid-sized businesses across various industries in the private sector in both the US and Canada. Check out the full report to dive into all the numbers!United States(VIB), which surveyed 250+ mid-sized businesses across various industries in the private sector in both the US and Canada. Check out the full report to dive into all the numbers!
