Each year, there are numerous reports published on cyber security. In time, it is something we may explore ourselves at CRIBB – we’re just a little too busy helping clients right now! – but we always pay attention to what is released. One we have been digesting this year is the latest from CyberEdge. Here we break down some of the key findings from their ninth ‘Cyberthreat Defence Report 2022’.

What is the CDR?

Typically, IT security industry surveys collect statistics on cyber-attacks and data breaches. With their annual CDR, CyberEdge aim to offer “deep insight into the minds of IT security professionals”. A staple among leaders in IT security, the report is a valuable tool in their on going efforts to gauge internal practices and security investments against their counterparts around the globe, This year, survey responses were gathered from 1,200 qualified IT security decision makers and practitioners. These respondents all work for organisations with over 500 employees and represent 19 industries in 17 countries across North America, Europe, Asia Pacific, the Middle East, Latin America and Africa. Research sponsors include ISC2, Perimeter X and Threat X.

Key findings from the latest report

  • IT security teams continue to work under intense pressure as most organisations are experiencing multiple successful cyber-attacks
  • The main organisational security issues are a shortfall of skilled IT security personnel and low security awareness among employees
  • Malware has long been seen as the most important cyber threat but ransomware and Account Takeover (ATO) attacks are likely to succeed it in the months ahead
  • Indeed, ransomware continues to grow
  • The majority of IT security teams are now on top of the ‘new norm’ born out of the pandemic

Do any of these points apply to you and your organisation? If so then we would love to hear from you. Our experts can assess your current IT security. They can reveal how best to mitigate cyber-attacks, and by teaming up with us, you can effectively fill security skill gaps.

Important statistics from the report

  • 6 or more cyber-attacks against the same organisation are becoming more common, as more than 40% of the respondents experienced this last year
  • Many organisations have doubts about user security awareness as threat actors continue to develop social engineering campaigns to leverage human weaknesses (i.e., Phishing attacks)
  • According to the findings, 84.1% of organisations cannot find enough skilled security people
  • Hybrid cloud security challenges are a growing concern
  • 83.2% of the participating organisations expect to grow their IT security budget

In conclusion

Cyber security continues to be a growing area of importance. Organisations are struggling to find skilled IT security staff and then there are also huge challenges in raising cyber awareness amongst their workforces. Cyber-criminals continue to develop more robust methods to carry out cyber-attacks, deploying new tactics and preying upon human error. Digital transformation is generating new issues to face and so security budgets are liable to rise in the months ahead. What can you do to mitigate these risks and more? If you have a cyber security strategy in place then an assessment may be in order. If you do not, then you should look to change that – and fast!

Contact CRIBB to access or discuss the full Cyberthreat Defence Report 2022.