Kaseya survey finds human behaviour a top cyber threat

Kaseya has released its 2024 Cybersecurity Survey Report, revealing new insights into the challenges currently faced by IT professionals in the realm of cybersecurity.

According to the survey, human behaviour continues to pose the most significant threat to cybersecurity, with 89% of respondents identifying it as their primary concern. This sentiment is reflected in the fact that poor user practices and a lack of end-user training are seen as the root causes of cybersecurity problems.

Daniel Garcia, Vice President and General Manager at Kaseya APAC, commented on the findings, "Cybersecurity attacks are widespread and more sophisticated, and as a result, are shaping business and IT strategies. IT professionals are navigating this new frontier as they try to find a balance between cybersecurity needs against hybrid workforces, dependency on cloud-based applications and services, and the role of artificial intelligence in cyberattacks."

Phishing scams emerged as having the most significant business impact, affecting 58% of businesses. Other common issues reported include computer viruses or malware and business email compromises.

The role of artificial intelligence in cybersecurity is evolving, and IT professionals have mixed opinions. While cybercriminals are leveraging AI to execute sophisticated attacks at greater speed, more than half of survey participants believe AI could enhance security. However, about one-third remain uncertain about AI's potential impact.

The survey indicates a declining trend in ransomware payouts, with only 11% of companies choosing to pay ransoms. Increased investment in backup and recovery technologies is deemed a significant factor in mitigating the effects of attacks.

Security frameworks such as NIST and Zero Trust are being widely adopted, reflecting a trend towards increased security maturity. Antivirus software, email protection, and file backup systems are commonly employed security solutions, though the survey noted a need for more rigorous periodic testing of incident response plans.

Pentesting is challenged by budget constraints and limited resources, yet remains a key strategy against cybercrime, with the majority of respondents conducting tests at least twice a year.

An increase in cyber insurance adoption was also reported, with coverage rising to 61% in 2024 from 27% the previous year, indicating a trend towards using insurance as a hedge against potential cyber incidents.

Regarding budget allocations, over 80% of respondents believe their IT security budgets will either remain stable or grow over the next year. Planned investments include cloud security, automated pentesting, and security awareness training.

The survey sample consisted primarily of companies based in North America, with a smaller representation from the UK, EU, and APAC regions. Most of these companies have annual revenues between USD $1 million and USD $10 million and employ 101 to 500 people.