Kaseya has unveiled its 2024 Cybersecurity Survey Report, shedding light on the pressing challenges that IT professionals encounter in the ever-evolving landscape of cybersecurity.
Human Behavior: The Primary Concern
The survey reveals that human behavior remains the most significant threat to cybersecurity, with an overwhelming 89% of respondents citing it as their top concern. This perspective underscores the critical role that poor user practices and insufficient end-user training play in exacerbating cybersecurity issues.
Daniel Garcia, Vice President and General Manager at Kaseya APAC, elaborated on these findings, stating, “Cybersecurity attacks are widespread and more sophisticated, and as a result, are shaping business and IT strategies. IT professionals are navigating this new frontier as they try to find a balance between cybersecurity needs against hybrid workforces, dependency on cloud-based applications and services, and the role of artificial intelligence in cyberattacks.”
Phishing and Emerging Threats
Among the myriad of threats, phishing scams have emerged as the most impactful, affecting 58% of businesses surveyed. Additional concerns include computer viruses, malware, and business email compromises, all of which continue to challenge organizations.
The Dual Role of Artificial Intelligence
The evolving role of artificial intelligence in cybersecurity presents a complex picture. While cybercriminals are increasingly utilizing AI to conduct sophisticated attacks with alarming speed, more than half of the survey participants believe that AI could also bolster security measures. However, approximately one-third of respondents remain uncertain about AI’s overall potential impact.
Ransomware Trends and Security Frameworks
Interestingly, the survey indicates a decline in ransomware payouts, with only 11% of companies opting to pay ransoms. This trend is attributed to heightened investments in backup and recovery technologies, which are proving essential in mitigating the effects of such attacks.
Moreover, the adoption of security frameworks like NIST and Zero Trust is on the rise, signaling a shift towards greater security maturity. Commonly employed security solutions include antivirus software, email protection, and file backup systems, although the survey highlights a pressing need for more rigorous periodic testing of incident response plans.
Investment in Cybersecurity
Despite facing budget constraints and limited resources, penetration testing remains a vital strategy against cybercrime, with the majority of respondents conducting tests at least twice a year. Additionally, a notable increase in cyber insurance adoption has been observed, with coverage rising to 61% in 2024 from just 27% the previous year, reflecting a growing trend of using insurance as a safeguard against potential cyber incidents.
When it comes to budget allocations, over 80% of respondents anticipate that their IT security budgets will either remain stable or experience growth in the coming year. Planned investments are set to focus on cloud security, automated penetration testing, and security awareness training, indicating a proactive approach to enhancing cybersecurity measures.
The survey primarily sampled companies based in North America, with a smaller representation from the UK, EU, and APAC regions. Most respondents belong to organizations with annual revenues ranging from USD million to USD million and employ between 101 to 500 individuals.