Small Business Still Not Ready For Cyber Attacks

Very few US small business see cyber attacks and security as a big risk, according to a report from CNBC which finds that only 5% saw cyber security as a business risk and inflation was far higher on their list of potential issues.

The CNBC SurveyMonkey Small Business Survey talked to more than 2,000 small business owners every quarter to understand their outlook on the overall business environment along with their own business’s health. It looks like small business directors are failing to take any new steps to reduce their business risk  from cyber attacks compared to last year.

Since the attempted in invasion of Ukraine, US security agencies have stepped up their warnings about an increased risk of a cyber attack, which Russia could use to try to draw the US into a direct conflict. “The cyber security authorities of the United States, Australia, Canada, New Zealand, and the United Kingdom (the Five Eyes), have released this joint Cyber Security Advisory (CSA). “The intent of this joint CSA is to warn organisations that Russia’s invasion of Ukraine could expose organisations both within and beyond the region to increased malicious cyber activity... This activity may occur as a response to the unprecedented economic costs imposed on Russia as well as materiel support provided by the United States and US allies and partners,” says the Cybersecurity & Infrastructure Security Agency.

This latest round of the Small Business Survey is the first since the start of the Ukraine war, although the international events have had no perceptible impact on the preparedness of small business in the US.

Key findings from the Survey include:

  • Eight in ten small business owners expect a recession to occur this year
  • Inflation continues to be a top concern, but small business owners are reluctant to raise their own prices.
  • Despite the potential threat from Russia, cybersecurity is no more of a concern for small business owners now than in previous quarters.
  • President Biden’s approval rating remains underwater among small business owners, with no change over the past three quarters.
  • Small business confidence ticks up for the first time in the Biden Administration, popping up to a score of 46 out of 100, but remains near its all-time lows.

Smaller businesses are the least concerned about cyber attacks: just 33% of owners with 0-4 employees are concerned about experiencing a cyber attack within a year, compared with 61% of small business owners who have 50 or more employees. 

Consumers would rather not be the victim of a cyber security attack themselves, and they are wary to trust businesses that have been compromised in the past. 

In SurveyMonkey’s polling, 55% of people in the US say they would be less likely to continue to do business with brands who are victims of a cyber attack and small businesses need to be prepared and have a strategy and cyber security tactics list that they enact. 

  • Fewer than 50% of businesses say they have installed antivirus or malware software, strengthened their passwords, or backed up files on an external hard drive to protect their business against potential cyber attacks. 
  • Only a third each have enabled automatic software updates or enabled multi-factor authentication. Just one quarter have installed a virtual private network (VPN). 

Small businesses that fail to take the cyber threat seriously risk losing customers, or much more, when a cyber threat emerges. Small and medium sized business must take cyber threats seriously and education and training of directors and staff is vital.

CISA:      CNBC:      Momentlive:    Survey Monkey:    NewsQuick24:    CISO Magazine:     TechRepublic:  

You Might Also Read: 

Are Your Employees The Weakest Link Against Cyber Crime?:

 

« Iran Caught Using Intermediaries To Hack Israeli Business
Global Cyber Security Insurance Market Will Grow To $61.2B »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Spiceworks

Spiceworks

Spiceworks provide a range of free apps for IT professionals including network inventory, network monitor, and help desk.

CEPS

CEPS

CEPS is a leading think tank and forum for debate on EU affairs, ranking among the top think tanks in Europe. Topic areas include Innovation, Digital economy and Cyber-security.

CERT.hr

CERT.hr

CERT.hr is the national authority competent for prevention and protection from computer threats to public information systems in the Republic of Croatia.

Oppida

Oppida

Oppida provides tailored IT security services to help you identify security gaps and assist in finding the most effective remediation.

Silent Breach

Silent Breach

Silent Breach specializes in network security and digital asset protection. Services include Pentesting, Security Assessments, Incident Detection & Response, Governance Risk & Compliance.

PrivateVPN

PrivateVPN

PrivateVPN is a Virtual Private Network services provider offering secure encrypted access to the internet.

Gulf Computer Services Co (GCSC)

Gulf Computer Services Co (GCSC)

Gulf Computer Services is a major player in the field of networking & Communication solutions for emerging industries such as Internet Services and Information Technology in Saudi Arabia.

SecureNation

SecureNation

SecureNation offers a wide variety of cutting-edge technologies and IT services to address almost any of your information security, network security and information assurance needs.

UTMStack

UTMStack

UTMStack is a Unified Security Management system that includes SIEM, Vulnerability Management, Network and Host IDS/IPS, Asset Discovery, Endpoint Protection and Incident Response.

BCN Group

BCN Group

BCN Group is an agile IT solutions provider. We are experts in delivering and managing business-critical technology solutions.

US Marine Corps Forces Cyberspace Command (MARFORCYBER)

US Marine Corps Forces Cyberspace Command (MARFORCYBER)

US Marine Corps Forces Cyberspace Command (MARFORCYBER) conducts full spectrum military cyberspace operations in order to enable freedom of action in cyberspace and deny the same to the adversary.

Apollo Information Systems

Apollo Information Systems

Apollo is a value-added reseller that provides our clients with the complete set of cybersecurity and networking services and solutions.

Park Place Technologies

Park Place Technologies

Park Place Technologies' mission is to drive uptime, performance and value for critical IT infrastructure.

Sify Technologies

Sify Technologies

Sify is the largest ICT service provider, systems integrator, and all-in-one network solutions company on the Indian subcontinent.

Lenze

Lenze

Lenze are an experienced partner for automation systems, digitalization and cyber security.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.