Top cybersecurity considerations for SMEs in 2021

Issue 3 2021 Cyber Security, News

Cisco has published its 2021 SMB Security Outcomes Study, a derivative of Cisco’s flagship cybersecurity report, 2021 Security Outcomes Study, highlighting what SMB leaders are doing to thrive in today's ever-evolving threat landscape, as well as offering actionable insights on where they should focus their digitisation, security planning and cyber defence efforts in the year ahead.


Fardy Younes.

The double-blind study is based on a survey of over 850 regional IT and security professionals from small (50 to 249 employees) and mid-size (250 to 499 employees) organisations in 25 countries from Europe, Middle East, Africa and Russia (EMEAR). The report examines how security leaders in SMB organisations can achieve success in their cybersecurity programmes by looking at which specific practices help to enable their businesses, combat advanced threats and targeted attacks and operate efficiently.

Commenting on the study, Fardy Younes, cybersecurity director, Middle East and Africa, Cisco, said: “Historically, vendors, practitioners and the cybersecurity industry as a whole have assumed that bigger means better. However, agility is what makes small and mid-size businesses uniquely positioned to build successful approaches to security. Our findings reveal that SMBs place higher importance on having the right security strategy in place and that they take the time to understand how this factor can best align with the digital transformation and growth agenda of their business. Planning for resilience and modernisation of technology remain critical factors for today’s SMBs looking to advance their security fabric.”

The survey revealed that security teams in small and mid-size businesses are doing a better job in enabling the mission of their organisations. With fewer resources, 44% of SMEs say their security teams are keeping pace with the changing needs and growth of the business, compared with 42% of large enterprises.

The study identified three areas small organisations should focus on to achieve success in their cybersecurity programmes: enabling business, managing risk and operating efficiently.

Enabling business

The study highlights three factors to achieve security outcomes:

• Sufficient security staff.

• A secure development approach.

• IT and security collaboration.

Each of these components have been shown to increase confidence and buy-in from peers and security success. For example, the probability for security success in obtaining peer buy-in increases up to 22% when small businesses have sufficient security staff and up to 17.6% when IT and security functions work collaboratively together.

Managing risk

Compliance as well as the growing threats of cyberattacks have been a driver for security adoption in SMEs. However, as more standards emerge, regulations increase and threats develop, the minimal requirements bar keeps getting notched up. To tackle this ever-shifting landscape, the study demonstrates that with appropriate investments organisations and collaborative teams can meet regulations and reduce risk.

Besides the sufficient security budget and having teams working together, the study finds that SMEs that proactively and regularly upgrade to best available IT and security technologies improve the chances of mitigating critical cyberthreats and avoiding major incidents.

Operating efficiently

Enterprises large and small are budget conscious and must seek ways to streamline both IT and ensure security optimisation. According to the Cisco’s study, small and mid-size organisations are finding success when teams understand security. Understanding how security strategy and planning can support business imperatives streamlines incident response and minimises unplanned work. Moreover, the study again emphasises the value of teams working together as this factor contributes wildly to cost-effectiveness.

The study also highlights the role of establishing well-integrated technology and incident response solutions for operating efficiently in mid-size companies. Ensuring these two factors helps, effectively minimising unplanned work and increasing cost effectiveness.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Protecting business from ransomware at the edge
Issue 4 2021 , Cyber Security
It might not always be possible to prevent ransomware from infecting remote networks, however, a robust backup and disaster recovery strategy can get the business back on track if systems are locked down.

Read more...
USBs threats are back
Issue 4 2021 , Cyber Security
Kaspersky has uncovered a rare, wide-scale advanced persistent threat (APT) campaign; initial infection occurs via spear-phishing emails containing a malicious Word document and can then spread to other hosts through removable USB drives.

Read more...
Incedo consolidates its cybersecurity defence
Issue 4 2021 , Cyber Security
Check Point Software´s end-to-end solution safeguards Incedo and its customers from a global spike in cyberattacks, while reducing costs and increasing productivity.

Read more...
Top 10 security misperceptions
Issue 4 2021 , Cyber Security, Security Services & Risk Management
The Sophos Rapid Response team has compiled a list of the most commonly held security misperceptions they’ve encountered in the last 12 months while neutralising and investigating cyberattacks in a wide range of organisations.

Read more...
PoPIA: De-identifying, matching and filing
Issue 3 2021 , Editor's Choice, News, Security Services & Risk Management
Three of the crucial areas in organisational PoPIA compliance that must be discussed include de-identifying, information matching programmes and filing systems.

Read more...
Local cyber is global
Issue 4 2021 , Cyber Security
Understanding the risks and how cybercriminals implement their attacks allows Performanta to prepare customers for a proactive security posture against these threats.

Read more...
Winners of the inaugural South Africa OSPAs
Issue 4 2021, Technews Publishing, Secutel Technologies, Cathexis Technologies , Editor's Choice, News, Integrated Solutions, Security Services & Risk Management
The presentation of the first-ever South Africa Outstanding Security Performance Awards (OSPAs) took place virtually on Thursday 3rd June 2021 as part of an internationally attended online thought leadership webinar.

Read more...
Gijima and Cattron to deliver intelligent solutions
Issue 4 2021, Gijima Specialised Solutions (GSS) , Industrial (Industry), News, Integrated Solutions
South African ICT provider, Gijima, has entered into a partnership agreement with Cattron, a provider of high-performance, intelligent control solutions, as part of Gijima’s quest to expand its horizons.

Read more...
Cybersecurity in the physical security world
Issue 4 2021, Technews Publishing, Milestone Systems, Axis Communications SA, AVeS Cyber Security, Vox , Editor's Choice, Cyber Security, Integrated Solutions, IT infrastructure
Hi-Tech Security Solutions, in partnership with Milestone Systems, hosted a round table discussion to find out about the trends and realities and the importance of cybersecurity in the physical security and IoT world.

Read more...
Design for the users, not against them
Issue 4 2021 , Editor's Choice, Cyber Security, IT infrastructure
Security is an evolving process, a liquid and malleable evolution that engages with user, technology and system to ensure absolute security coherence, says Henk Olivier, MD of Ozone Information Technology Distribution.

Read more...