Roughly six in 10 small to medium-sized businesses (SMBs) in the U.S. outsource their cybersecurity management to third parties, such as managed security service providers (MSSPs), said ESET, an antivirus/antimalware provider, in its newly released 2022 SMB Digital Security Sentiment Report.
The report, which surveyed some 1,200 cybersecurity decision makers from SMBs in North America and Europe, gleaned data from interviews conducted in 12 countries. One-quarter of the total respondents were based in North America.
Examining the Data
In North America, 37% of SMBs look for security providers that understand small businesses and 35% seek vendors who offer a unified single view across multiple tools and attack vectors. Some 30% look for customer service-conscious outsource providers.
According to the data, 74% of SMBs in North America and Europe believe that they are more vulnerable to cyberattacks than are enterprises. Some 70% of businesses surveyed acknowledged that their investment in cybersecurity has not kept pace with recent changes to their operational models such as hybrid working.
In the last 12 months, nearly three in four U.S. respondents and more than half of Canadian respondents have experienced or acted on strong indications of a data security incident or breach. About 43% of U.S. respondents have been hit by more than one incident in the same time period as compared to 28% of Canadian respondents.
Commenting on the report, Tony Anscombe, chief security evangelist for ESET, said:
“What the data suggests is that Canadian businesses are experiencing fewer data breaches, which could be due to good privacy legislation that includes the requirement for cybersecurity. The data provides a clear indication of a disconnect between the cyber threat faced by SMBs and the investment they are making in cybersecurity."
Challenges, Concerns and More
The top three cybersecurity challenges North American SMBs face:
Slightly more than half (51%) of the respondents in North America describe themselves as being not at all confident/slightly confident in their cybersecurity resilience over the upcoming 12 months.
On SMBs and Microsoft Remote Desktop Protocol (RDP) security concerns:
On security audits.
On SMB adoption of EDR, XDR and MDR:
In late September, ESET launched new cloud and extended detection and response solutions for managed service providers.
