Year 2022: State of Cybersecurity — A Brief

The year 2021 was a groundbreaking year for cybersecurity, as the size and scope of cybercrime continued to grow. This blog explores recent threats, new trends in the domain and provides alternatives to traditional approaches to cyber resiliency.

Year 2022: State of Cybersecurity — A Brief
videoDuration
Do not index
Do not index
Thumbnail
Year_2021-_State_of_Cybersecurity__A_Brief.png
Category
Cybersecurity Market Research
video
Summary: The year 2021 was a groundbreaking year for cybersecurity, as the size and scope of cybercrime continued to grow. This blog explores recent threats, new trends in the domain and provides alternatives to traditional approaches to cyber resiliency.
notion image
Times have changed, especially in the cybersecurity domain. The number of vulnerabilities has increased 2.6 times in the last decade*, ransomware attacks have soared by 82 per cent y-o-y, cloud security is untransparent, and recently a 150+-year-old university in the USA had to shut down due to a cyberattack. Further, a recent hacker group is forcing people to donate money/clothes to get their data back!
Let’s look at some key highlights from 2021:
notion image
Further, the Anti Phishing Work Group (APWG) noted that June 2021 set an all-time record high with 222,127 phishing attacks that month alone.
The current year doesn’t look very bright either, 81 per cent of businesses aren’t using any form of cloud security posture management and only a mere 22 per cent of these businesses have some plan for building such resilience. To make matters worse, a third of the cybersecurity professionals plan to quit the industry.
Few other developments include*:
notion image
Given the increase in cyber threats, only 44 per cent of organizations report not having a dedicated cybersecurity staff and of the remaining, only 23 per cent employ one — to three staff members for cybersecurity.

Ransomware

A 76 per cent rise in ransomware related attacks (2020–21), demonstrated that cybercriminals have become more capable and threatening driven by Ransomware-as-a-Service, which allows for an immense increase in reach and requires a lower skill level. Let’s look at this more thoroughly**:
notion image
Surprisingly, 72 per cent of these victims put faith in security approaches that don’t actually prevent a ransomware attack! Additionally, research** shows 88 per cent of these victims have adequate cybersecurity budget and headcount, implying a deeper problem that businesses are unable to effectively use their security budget/manpower.

Cyber Insurance

In order to fight back, 83 per cent of businesses have opted for cyber insurance against ransomware, led by the energy, oil/gas and utility industry and closely followed by retail**.
A huge 94 per cent of businesses with cyber insurance said that the process to obtain such coverage has changed and become harder. This has led to almost all companies bolstering their cyber defence to improve their cyber insurance position**.
Examining what cyber insurance paid for, research shows a rise in payment for clean-up costs and a fall in ransom payments. 40 per cent of ransomware victims admit that their insurer paid the ransom, down from 44 per cent in 2019**.

Security Teams are Sinking

More than 60 per cent of businesses have admitted that keeping up with cybersecurity requirements has become harder. The most common reasons attributed were***:
notion image
Further, many cybersecurity teams include the following as their top challenges***:
■ Over-rotating to focus on compliance over best practices
■ Spending too much time addressing emergencies
■ Struggling to manage the complexity of security technologies

The Remote-Work Scenario

While the pandemic never seems to end and remote work becoming a necessity, the shift has caused several challenges for IT / security teams including device management, cloud access management, etc.
“Organizations expect that 12 months out, 41% of their workers will remain remote. As a result, 90% see a need to adjust security controls and policies.”
65 per cent of businesses have measured an increase in cyber-attacks assigned to remote work and on the contrary only 5 per cent witnessed a decrease***.

Talent Alternative

It is well known that the cybersecurity industry is struggling with talent count and skill gaps. 30 per cent of security leaders admit that they cannot hire enough security professionals to manage the workload and 35 per cent admit that the talent pool cannot match the required security skills***.
Let’s look at some solutions***:
notion image

Can a cybersecurity marketplace help?

On many occasions, niche tech-focused digital marketplaces have gone a long way in helping businesses procure quality & appropriate products/services to enhance business matrix. Marketplaces offer a carefully curated listing of various offerings aimed at fulfilling different business needs, thus adding tremendous value to numerous companies, take AWS or Fiver for instance.
Further, marketplace (like Ofofo, Inc) aims to eliminate multiple problems in procuring/selling cybersecurity solutions, some are highlighted below:
notion image

Conclusion:

While cybersecurity is a priority to many businesses, both large and small, traditional approaches have proved to be inadequate, especially for SMBs. As cyber crimes increase, it is of utmost importance for businesses to fight back and build a credible security posture. SMBs might want to explore cybersecurity intensive marketplaces that reduce time, effort and provide transparency both in terms of seller credibility and terms of purchase. Ofofo, Inc aims to provide an enhanced buying experience and a place of utmost confidence.

Ready to secure your business?

Join other 2000+ Subscribers now!

Subscribe

Written by

Mohan Gandhi Ponnaganti
Mohan Gandhi Ponnaganti

Co-founder and CEO, Ofofo.io