According to a global survey Kaspersky Lab, very small businesses (with fewer than 25 employees) are less likely to regard information strategy issues as top strategic priorities. As soon as 19% of micro-enterprises reported the information strategy as one of the two largest strategic priorities, the corresponding figure for enterprises with more than 100 employees is 30% and for enterprises with more than 5.000 employees at 35%. The results of the survey, which are included in the report IT Security Risks 2014 of Kaspersky Lab, highlight a major challenge for very small businesses. An effective IT strategy is a vital element for any successful business and can help a small business achieve significant results.
Many small and very small businesses believe they are too small to be targeted by digital criminals and that they do not have data that interests them. But the report Data Breach Investigations Report Verizon's 2013, which includes data from global forensic investigations, has shown that from 621 data breaches analyzed, 193 - that is, above it 30% - occurred in enterprises with 100 or fewer employees[I]. From the moment businesses start processing payments through credit cards, store customer information, or even design new products, they have information that is valuable to digital criminals. Some of them may prefer these "easy targets" because they know they lack adequate security infrastructure.
According to her research Kaspersky Lab, the very small businesses understand the dangers of digital threats. In a question about their biggest concerns about computing, 35% cited "data protection" among the top three, along with "ensuring the continuity of critical systems". This percentage highlights that many of the very small businesses know that information strategy plays a critical role in protecting sensitive data and everyday work from malware and digital criminals.
In addition, small businesses are well aware of the benefits and risks of using portable devices. 34% of small businesses reported that they have incorporated mobile devices into computer systems, within 12 last months. This percentage is equivalent to that of larger companies. In addition, small businesses are also very well informed about the safety of mobile devices. 31% of small businesses reported "handheld security" among the top three security priorities for the next 12 months. This percentage is impressively higher than the world average (23%). It also appears to break down the notion that small businesses are less well-informed about the use of mobile devices and their security than their larger competitors.
According to the above findings, the fact that small businesses do not prioritize information strategy – and by extension security – is not a result of a lack of information or knowledge. A logical conclusion is that lack of funds remains the biggest barrier preventing small businesses from adopting more advanced IT and security policies. In this context, Kaspersky Lab suggests that small businesses invest in security measures that offer them the most direct benefits for the threats they usually face.
Μεταξύ των πολύ μικρών επιχειρήσεων που συμμετείχαν στην έρευνα και ανέφεραν απώλειες επιχειρηματικών δεδομένων από ψηφιακές επιθέσεις, το 32% σημείωσε ότι το πιο σοβαρό περιστατικό προκλήθηκε από malware. Αυτό το ποσοστό είναι διπλάσιο σε σχέση με τις μεγάλες επιχειρήσεις (16%). Μια άλλη σημαντική πηγή απωλειών δεδομένων για τις μικρές επιχειρήσεις εντοπίστηκε στις vulnerabilities of software, which was reported by 9% of small businesses. This percentage is close to the global average of 8%. This means software vulnerabilities are a security issue that affects almost all businesses equally, regardless of their size.
Security suggestions
With base the above data, h Kaspersky Lab recommends small businesses to consider investing in a comprehensive security solution. For example, the Kaspersky Small Office Security includes technologies that are similar to those used by large companies. This solution does not require IT specialization for its operation, it also includes the leading machine anti-malware of market. It also has a scanning and software vulnerability detection feature to identify machines that could be exploited by digital criminals. The Kaspersky Small Office Security it also includes functions to protect systems from malware and mobile devices in cases theftς, σε συνδυασμό με εργαλεία κρυπτογράφησης δεδομένων. Έτσι, διασφαλίζεται ότι τα δεδομένα παραμένουν ασφαλή ακόμη και σε περίπτωση κλοπής ή τυχαίας διαγραφής.
In addition, small businesses are important to develop an appropriate security strategy that should respond to their particular needs and be based on the following key priorities:
- Risk assessment
- Development of appropriate policies and procedures
- Emergency plan development
- Create a group of employees responsible for ensuring compliance with safety standards
- Implement security solutions on all devices that have access to corporate data
- Develop strategies for security updates, which should be done regularly
- Informing and raising awareness of employees on safety issues
More information is available on its website Kaspersky Small Office Security and on its website Kaspersky Lab.
