ISLAMABAD – According to a recent study by Kaspersky, a global cybersecurity and digital privacy company, 15% of companies globally have experienced cyber incidents due to insufficient cybersecurity investment in the last two years.
Alarmingly, critical infrastructure, oil & gas, and energy organizations suffered the most significant number of cyber incidents due to improper budget allocation. And when it comes to companies’ finances globally, one in five admit they do not have the budget for adequate cybersecurity measures.
Kaspersky conducted a study to discover the opinions of IT Security professionals working for SMEs and enterprises worldwide regarding the human impact on cybersecurity in a company.
The telecommunications sector suffered 13% of cyber incidents due to budget constraints, while transport & logistics, and financial services companies saw 8% of them.
When asked about the budget for cybersecurity measures, 78% of respondents globally said they are equipped to keep up with or even stay ahead of new threats. However, 21% of companies are not doing so well – 18% report that they don’t have sufficient funds to protect the company’s infrastructure adequately. At the same time, there are still companies without cost allocations for cybersecurity at all – 3% claimed they don’t have a dedicated budget for cyber protection needs.
Many respondents’ companies are eager to take steps to strengthen their cybersecurity in the next 1-1.5 years. One of the most popular investment areas is threat detection software and training, where 39% of companies plan to allocate budgets for educational programs for cybersecurity professionals and 38% for training general staff.
Other popular measures organizations plan to take soon are introducing endpoint protection software, hiring additional IT professionals, and adopting SaaS cloud solutions, “Today, companies must align cybersecurity investment with a business strategy and consider cybersecurity as one of their business goals.
The challenges can be met using various modern approaches and technologies. For example, we are investing in developing our SASE portfolio and XDR and MDR with integrated AI, Machine Learning, automated detection and response, automated threat investigation, and out-of-the-box integrations.
To ensure process transparency and prove the value of our solutions, we also provide C-level dashboards and reports for CISOs, which include information on how many incidents we prevented, how quickly incidents were investigated, and the effectiveness of deployed cybersecurity solutions. We also highlight customer-specific risks and show them trends particular to the industry to help them shape their cybersecurity by targeting their defences around current dangers and justify investments in the necessary technology.” comments Ivan Vassunov, VP of Corporate Products at Kaspersky.
Kaspersky recommends implementing cybersecurity products with Advanced Anomaly Control, such as Kaspersky Endpoint Detection and Response Optimum, to maximise your budget. Kaspersky Endpoint Security Cloud is designed for smaller enterprises or companies that don’t currently have the budget for a comprehensive stack of cybersecurity products. The all-in-one hosted SaaS console allows a single administrator to manage a broad range of cybersecurity tasks from one place with a simple and easy-to-master workflow.
Kaspersky Automated Security Awareness Platform training teaches employees safe internet behaviour and includes simulated phishing attack exercises. At the same time, Kaspersky Cybersecurity for IT Online training helps build up simple yet effective IT security best practices and simple incident response scenarios for generalist IT admins, while Kaspersky Expert Training equips your security team with the latest knowledge and skills in threat management and mitigation to defend your organization against even the most sophisticated attacks.
To advance decision-makers’ understanding of the importance of cybersecurity and how best to distribute budgets to stay ahead of threats, engage them with Kaspersky Interactive Protection Simulation for enhanced C-level professional education.
