Survey Finds Security Gaps at Mid-Sized Businesses

· Original article ↗

Summary

A survey of 250+ mid-sized businesses in the US and Canada found gaps in incident response, cybersecurity staffing and employee training; nearly one-quarter reported a cyber attack or were unaware of one.

Key points

  • The survey covered more than 250 private-sector mid-sized businesses in the US and Canada.
  • Nearly 24% of respondents said their organization had suffered a cyber attack in the past year or that they were unaware whether one had occurred.
  • 47% reported having no incident response plan, and 61% said they lacked dedicated cybersecurity experts.
  • 59% said they conduct regular formal security awareness training, while the article also reports that over 40% do not.

Article Details

Publisher
Huntress
Report Period
2023
Scope
Cybersecurity posture and practices of mid-sized private-sector businesses in the US and Canada
Sample Size
250+ mid-sized businesses
Key Statistics
  • 24% of respondents had experienced a cyber attack or were unaware of an attack on their organization in the previous year.
  • 47% reported having no incident response plan.
  • 61% reported having no dedicated cybersecurity experts.
  • 59% conducted regular formal security awareness training.
Recommendations
  • Prioritize formal cybersecurity awareness training to help employees recognize and avoid potential threats.

Countries