By Alice Chambers |
Almost half (43 per cent) of small and medium-sized businesses (SMBs) faced at least one cyberattack in 2024 and only 31 per cent were able to detect the incident within minutes, finds new security report from Devolutions.
The Microsoft security partner collected responses from 445 professionals across IT, security and executive leadership roles for its The State of IT Security in SMBs report.
The firm also found that 71 per cent of SMBs say they feel confident in handling a major cybersecurity incident yet only 22 per cent say that have an advanced cybersecurity posture. And IT professionals, the ones closest to the day-to-day vulnerabilities are the ones with the lowest confidence.
While the adoption of privileged access management solutions has grown from 45 to 52 per cent since 2023, 52 per cent of SMBs still manage access with manual processes such as spreadsheets and shared vaults.
“The human is often the weakest link – and spreadsheets don’t make us stronger,” said Maurice Côté, vice president of product at Devolutions.
Plus, 71 per cent of SMBs say they plan to increase their use of AI in cybersecurity but 40 per cent aren’t using it at all today.
“AI won’t replace your cybersecurity team – but it will expose the cracks in your posture faster than ever,” said David Hervieux, CEO of Devolutions. “SMBs that treat AI as a partner, not a plugin, will be the ones who thrive. Believing you’re secure isn’t enough anymore. In today’s world, SMBs need to measure their posture honestly – and invest like it matters. Because it does.”