Half Of All Canadian Businesses Hacked

A new survey has terrifying implications for Canadian businesses across the country.

Conducted by marketing research firm Ipsos Canada on behalf of Calgary-based accounting, tax and business consulting firm MNP LLP, the survey found that nearly 60 per cent of Canadian small business owners and C-suite executives either suspect or know for certain they were the victims of an external cyber-attack during the last year, with 50 per cent of C-suite executives indicating that they know for certain that their company experienced a breach.

An additional three in 10 suspected their company was the victim of a breach in the past year, but didn’t know for certain.

And despite the overwhelming evidence indicating otherwise, eight executives in 10 reported being confident in their business’s ability to prevent an external hacking attempt, while 93 per cent of survey respondents indicated confidence in their ability to protect customer data.

In a 7 statement, former Canadion National Police  investigator and current MNP vice president of valuations, forensics, and litigation support Greg Draper called cyberattacks “a reality of doing business,” but added that the survey underlined just how poorly Canadian businesses are equipped to address them.

“There is a significant gap between the perceived preparedness of businesses and the number of data breaches occurring,” Draper said. 

“The number and sophistication of hackers is growing at light speed, but businesses are not evolving their prevention and detection strategies at the same rate. Developing an effective defense against external fraud is an exercise in continuous improvement, not just set-it-and-forget-it. That’s the part that businesses are missing here.”

For example, Draper called it “startling” that only 54 per cent of C-suite executives and small business owners reported using cybersecurity measures such as firewalls.

The findings were especially surprising given that upcoming changes to Canadian privacy laws will require Canadian companies to log and disclose all breaches, Draper noted.

“Along with the costs of a potential business disruption or loss of confidential information, businesses will start to see the breach-related expenses climb sharply when they are forced to publically disclose them,” he said. 

“Loss of customer confidence and potential legal action, fines for non-compliance and the resources to ascertain exactly how hackers got in and then implementing new security measures – the proactive approach to mitigating external fraud risk is far more cost-effective.”

In conducting the online survey, Ipsos polled 1000 owners of small businesses with between five and 99 employees, and 100 C-suite executives at businesses with more than 100 employees, between Jan. 17 and Jan. 26, 2017.

IT World Canada

You Mighy Also Read

Four Steps To Managing Cyber Security Better:

Strategies To Prevent 85% Of Cyber Attacks:

Directors Report January 2017. Cyber Security Checklist For Management (£):

 

 

« Strategies To Prevent 85% Of Cyber Attacks
Insurers Get Much More Cautious About Cyber Risk »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall And Why Does It Matter

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall And Why Does It Matter

See how to use next-generation firewalls (NGFWs) and how they boost your security posture.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

QinetiQ

QinetiQ

QinetiQ is one of the world's leading defence technology and security companies. Areas of activity include air, land, sea and space systems, weapons, robotics, C4ISR and cyber security.

Techmeme

Techmeme

Techmeme is an online news curation service focused on leading edge technology, including cyber security.

Qualitèsoft Technology

Qualitèsoft Technology

Qualitèsoft Technology is a leading Software Development and Quality Assurance organization. We specialize in Custom Development, Mobile Application, Software Testing and Quality Assurance.

Secure360

Secure360

Secure360 focuses on the following key areas: governance, risk and compliance, information security, physical security, business continuity management, and professional development.

Secure Recruiting International (SRI)

Secure Recruiting International (SRI)

SRI is an industry leader in Information Security , Networking, Wireless and Storage recruitment.

Telia Cygate

Telia Cygate

Cygate are specialists in information security, data networks, and data centre and cloud technologies.

Lynxspring

Lynxspring

Lynxspring provides edge-to-enterprise solutions and IoT technology for intelligent buildings, energy management, equipment control and specialty machine-to-machine applications.

Tempered Networks

Tempered Networks

Tempered Networks delivers the first purpose-built platform for IIoT cybersecurity that allows customers to connect and secure devices in minutes without the need for specialized skills.

Tessian

Tessian

Tessian (formerly CheckRecipient) is a next-generation email security platform that helps enterprises counteract human error and significantly reduce the risk of data loss.

Xcina Consulting (XCL)

Xcina Consulting (XCL)

Xcina Consulting provides high quality business and technology risk assurance and advisory services.

Information Technology Industry Development Agency (ITIDA)

Information Technology Industry Development Agency (ITIDA)

ITIDA has two broad goals: building the capacities of Egypt’s local information and communications technology (ICT) industry and attracting foreign direct investments to boost the ICT sector.

Appgate

Appgate

Appgate is the secure access company. We empower how people work and connect by providing solutions purpose-built on Zero Trust security principles.

Coveware

Coveware

Coveware helps businesses remediate ransomware. We help companies recover after files have been encrypted, and our analytic, monitoring and alerting tools help companies prevent ransomware incidents.

AutoRABIT

AutoRABIT

AutoRABIT provides DevSecOps tools built specifically for Salesforce developers to increase release velocity, produce consistently high-quality code, and enhance data security.

IPKeys Cyber Partners

IPKeys Cyber Partners

IPKeys Cyber Partners, together with the IPKeys Power Partners unit, provide Cyber Security and CIP Compliance for utilities, grid operators and public safety organization across the USA.

VISO Cyber Security

VISO Cyber Security

VISO provide Cyber Security Consulting and CISO as a Service to companies who need to augment their leadership teams with information security expertise.