According to new research from Cisco, Canadian businesses are not equipped to respond to security threats within their networks.
Respondents were asked questions about security policies, practices and recent cyber-attacks at their business, including their security preparedness for new IT consumption models such as mobile and cloud-based applications.
Cisco’s findings indicate many Canadian businesses operate without any security strategy for their network, leaving them woefully underprepared to take advantage of new opportunities created by the Internet of Everything (IoE) and making them highly susceptible to threats such as data loss or theft.
With IoE driving the connection of people, processes, data, and things, the number and type of attack vectors will continue to increase exponentially, driving the mandate that security must become top of mind for businesses in today’s connected world.
Ahmed Etman, General Manager of Cyber Security, Cisco Canada said it was concerning to see such confusion but changes can be made. “Our findings indicate 95% of Canadian businesses know whether or not they protect company data on employee-owned devices,” he said. “The challenge now becomes changing security practices so they have the right level of protection for our connected world.”
Key Findings
- 6 out of 10 businesses either do not have a security strategy in place, and/or are unsure whether their security strategy accounts for an evolving data centre and IT consumption model, or do not have a strategy to prepare for these changes.
- Nearly one in 10 (8%) of Canadian businesses overall are still unsure whether they experienced a security threat, attack or breach on their network in the last 12 months.
- 15% of Canadian businesses still do not have a security strategy in place.
- 1 in 5 (22%) Canadian businesses report they have experienced a threat, attack or breach in the last 12 months.
- Canadian businesses with less than 100 employees are the most likely to not have a security strategy (26%), while mid-sized businesses are the least likely to have a strategy in place for changing IT consumption models (25%).
- One in three (31%) of Canada’s largest companies are unsure whether their IT security strategy accounts for evolving data centre and IT consumption models
- Canadian businesses are slow to protect company data on employee-owned devices.
- Less than 60% of Canadian businesses have IT solutions in place to protect company data on employee-owned devices.
- Nearly a quarter (24%) of employed Canadians use a personal device for work despite being employed by a company that does not allow this practice. Another 11% do so without knowing if it is allowed by their employer or not.
- The Canadian businesses most prepared to protect company data on employee-owned devices are those with more than 1000 employees (64%). Those least prepared are businesses with less than 100 employees (44%).
- Almost half (48%) of employed Canadians believe they are allowed to bring and use personal devices on the corporate network, while 57% of Canadian businesses believe they have IT solutions in place to protect data on employee-devices.