Small Business Still Not Ready For Cyber Attacks

Very few US small business see cyber attacks and security as a big risk, according to a report from CNBC which finds that only 5% saw cyber security as a business risk and inflation was far higher on their list of potential issues.

The CNBC SurveyMonkey Small Business Survey talked to more than 2,000 small business owners every quarter to understand their outlook on the overall business environment along with their own business’s health. It looks like small business directors are failing to take any new steps to reduce their business risk  from cyber attacks compared to last year.

Since the attempted in invasion of Ukraine, US security agencies have stepped up their warnings about an increased risk of a cyber attack, which Russia could use to try to draw the US into a direct conflict. “The cyber security authorities of the United States, Australia, Canada, New Zealand, and the United Kingdom (the Five Eyes), have released this joint Cyber Security Advisory (CSA). “The intent of this joint CSA is to warn organisations that Russia’s invasion of Ukraine could expose organisations both within and beyond the region to increased malicious cyber activity... This activity may occur as a response to the unprecedented economic costs imposed on Russia as well as materiel support provided by the United States and US allies and partners,” says the Cybersecurity & Infrastructure Security Agency.

This latest round of the Small Business Survey is the first since the start of the Ukraine war, although the international events have had no perceptible impact on the preparedness of small business in the US.

Key findings from the Survey include:

  • Eight in ten small business owners expect a recession to occur this year
  • Inflation continues to be a top concern, but small business owners are reluctant to raise their own prices.
  • Despite the potential threat from Russia, cybersecurity is no more of a concern for small business owners now than in previous quarters.
  • President Biden’s approval rating remains underwater among small business owners, with no change over the past three quarters.
  • Small business confidence ticks up for the first time in the Biden Administration, popping up to a score of 46 out of 100, but remains near its all-time lows.

Smaller businesses are the least concerned about cyber attacks: just 33% of owners with 0-4 employees are concerned about experiencing a cyber attack within a year, compared with 61% of small business owners who have 50 or more employees. 

Consumers would rather not be the victim of a cyber security attack themselves, and they are wary to trust businesses that have been compromised in the past. 

In SurveyMonkey’s polling, 55% of people in the US say they would be less likely to continue to do business with brands who are victims of a cyber attack and small businesses need to be prepared and have a strategy and cyber security tactics list that they enact. 

  • Fewer than 50% of businesses say they have installed antivirus or malware software, strengthened their passwords, or backed up files on an external hard drive to protect their business against potential cyber attacks. 
  • Only a third each have enabled automatic software updates or enabled multi-factor authentication. Just one quarter have installed a virtual private network (VPN). 

Small businesses that fail to take the cyber threat seriously risk losing customers, or much more, when a cyber threat emerges. Small and medium sized business must take cyber threats seriously and education and training of directors and staff is vital.

CISA:      CNBC:      Momentlive:    Survey Monkey:    NewsQuick24:    CISO Magazine:     TechRepublic:  

You Might Also Read: 

Are Your Employees The Weakest Link Against Cyber Crime?:

 

« Iran Caught Using Intermediaries To Hack Israeli Business
Global Cyber Security Insurance Market Will Grow To $61.2B »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

Social-Engineer

Social-Engineer

Social-Engineer is a team of outside–the–box thinkers that share a common focus on human-to-human social engineering.

HUB International

HUB International

HUB is one of the largest insurance brokers in the world. HUB Risk Services provides the full range of expert consulting to identify risks, reduce exposure to loss and manage claims issues.

Integrity360

Integrity360

Integrity360 provide fully managed IT security services as well as security testing, integration, GRC and incident handling services.

Australian Cyber Security Growth Network (AustCyber)

Australian Cyber Security Growth Network (AustCyber)

AustCyber brings together businesses and researchers to develop the next generation of cyber security products and services.

Cyber Aware

Cyber Aware

Cyber Aware aims to drive behaviour change amongst small businesses and individuals, so that they adopt simple secure online behaviours.

SCIS Security

SCIS Security

SCIS Security provides affordable cyber security services and solutions to small to medium sized businesses and homes.

Maritime Cyber Threats Research Group - University of Plymouth

Maritime Cyber Threats Research Group - University of Plymouth

The Maritime Cyber Threats research group of the University of Plymouth is focused on investigating marine cyber threats and researching solutions.

Telefonica Global Solutions (TGS)

Telefonica Global Solutions (TGS)

Telefonica Global Solutions is the technological partner of wholesalers and enterprises, helping them to achieve the digitalization they need.

Knowledge Lens

Knowledge Lens

Knowledge Lens builds innovative solutions on niche technology areas such as Big Data Analytics, Data Science, Artificial Intelligence, Internet of Things, Augmented Reality, and Blockchain.

CyberArmor

CyberArmor

Cyber Armor defend everyday IT and OT systems, from government agencies to critical infrastructure, from system integrators to small industries.

C3.ai Digital Transformation Institute

C3.ai Digital Transformation Institute

The C3.ai Digital Transformation Institute is a research consortium dedicated to accelerating the benefits of artificial intelligence for business, government, and society.

Sikich

Sikich

Sikich LLP is a leading professional services firm specializing in accounting, advisory, technology and managed services.

BCyber

BCyber

BCyber is a Swiss Cyber Security company that provides security products, training, and managed services to protect diverse IT and OT environments against cyber, physical, and cyber-physical threats.

Dutch Research Council (NWO)

Dutch Research Council (NWO)

The Dutch Research Council (NWO) is one of the most important science-funding bodies in the Netherlands and ensures quality and innovation in science.

ShieldIO

ShieldIO

ShieldIO Real-Time Homomorphic Encryption™ enables your organization to reach regulatory compliance without compromising data availability.

Baidam Solutions

Baidam Solutions

Baidam Solutions is a 100% Australian owned and operated First Nations information technology business.