Cloud security

These takeaways highlight why companies need to be more proactive in their security plans and why they should get help from managed security service providers.

The IT professionals surveyed reported that the average cost of cyber-attacks to their organization was between $50,000 and $100,000.

82% said their company has a cyber-security or cyber-attack readiness plan in place.

42% of the respondents said their company has been the victim of a cyber-attack.

53% said employees are the biggest source of cyber-attacks, followed by non-employees working as part of a group (18%) and non-employees working alone (15%).

Testing and monitoring system failure: 21%
Advanced persistent threats (APTs): 15%
Employee error: 14%
Lost equipment : 7%

Attack prevention: 50%
Recovery of loss from attack: 19%
Continuity of business during attack: 18%
Organizational response to attack: 13%

25% of respondents said their company’s cyber-security plan partially covers on-premise IT environments, devices and technologies. 30% said the plan partially covers cloud IT environments, devices and technologies.

43% said attacks could have been prevented with a more comprehensive cyber-security policy; 37% said they could have used better tools and methods for testing and monitoring; and 21% said they needed better communication of security policies to employees.

66% of the organizations surveyed use third-party consultants or MSSPs to develop or implement security plans, and 69% found those services to be “very helpful.”

83% of respondents said their organization uses cloud-based infrastructure or applications, and 22% said cloud-based systems were more cost-effective than on-premise security solutions.

Desktop and laptops: 59%
Databases: 57%
Web servers: 57%
Network security devices: 53%
Mobile devices: 43%
Application servers: 42%