Netwrix Annual Security Survey: 68% of organisations experienced cyber attack within the last 12 months

The most common consequences were unplanned expenses, loss of competitive-edge and decreased sales.

Netwrix, a cyber security vendor that makes data security easy, has announced the release of its annual global 2023 Hybrid Security Trends Report. It reveals that 68% of organisations experienced a known cyber attack within the last 12 months. Nearly one in six (16%) of those organisations estimated the financial damage to be at least $50 000. 

What’s more, 40% of the breached organisations incurred unplanned expenses and 10% suffered other serious consequences, such as loss of competitive-edge, decreased sales or customer churn.

To mitigate the risk of financial loss from a data breach, organisations often opt to purchase cyber insurance. Indeed, the study found that 44% of organisations are insured and 15% plan to purchase a policy within the next 12 months. Nearly 1 in 4 (22%) of the organisations with a policy had to improve their security posture to even be eligible for the policy.

While cyber insurance has value, it’s vital to remember that it is no substitute for a strong security posture. After all, while an insurance payout can defray the financial impact of a security incident, no policy can restore an organisation’s data, operations or reputation, says Dirk Schrader, VP of Security Research at Netwrix.

The survey also reveals that on-premises infrastructures suffer more cyber attacks than the cloud. The starkest difference was for ransomware and other malware attacks, which were reported by nearly twice as many respondents for on-premises environments (37%) as for the cloud (19%).

On-prem environments are more vulnerable to attacks than software-as-a-service (SaaS) systems because they often have sprawling privileges on the infrastructure level. For example, users might have administrative rights on their computers and service accounts often have elevated rights. Malicious actors can abuse these standing privileges to spread malware quickly across on-premises systems, says Dmitry Sotnikov, VP of Product Management at Netwrix.

Other survey findings include:

  • 81% of organisations now use at least one cloud environment and more than a third (37%) of the remainder plan to adopt cloud technologies within 12 months.
  • Phishing is the most common attack vector: 73% of respondents suffered this type of cyber attack on-premises and 58% experienced it in the cloud.
  • Account compromise attacks in the cloud continue to intensify, with 39% of respondents reporting it in 2023 compared to 31% in 2022 and just 16% in 2020.
  • Risk associated with an organisation’s own employees was the top data security concern, cited by 58% of respondents.
  • The three main IT priorities for 2023 have remained the same since 2019: data security, network security and cyber security training.

Understaffing of IT teams is the biggest challenge to ensuring data security, cited by half of respondents. Therefore, it is crucial to build a security architecture that reduces the workload for IT and security pros. Automating routine tasks, choosing mature security products that produce fewer false positive alerts, and relying on a select group of trusted vendors that have an extensive portfolio and a unified support team can help mitigate the shortage of security personnel, says Sotnikov.

Share

Netwrix Corporation

Netwrix makes data security easy. Since 2006, Netwrix solutions have been simplifying the lives of security professionals by enabling them to identify and protect sensitive data to reduce the risk of a breach, and to detect, respond to and recover from attacks, limiting their impact. More than 13,000 organizations worldwide rely on Netwrix solutions to strengthen their security and compliance posture across all three primary attack vectors: data, identity and infrastructure.

For more information, visit www.netwrix.com

Private Protocol

Private Protocol is a Next Generation IT Security distributor offering solutions and strategies that covers Mobile device, Data Security and Governance, AD Security, Secure Data Collaboration, Secure Messaging, SharePoint/O365 Security and Compliance, Network and Hybrid Security, File Share Security and Compliance, Software Defined Perimeter – Zero Trust Security and Cloud Security. Private Protocol have a distributed partner channel covering Africa and Indian Ocean Islands assist partners and customers with both products and services.

Contact:

Private Protocol

Website - www.privateprotocol.com

Email - info@privateprotocol.com