Global IT leaders rank malware, ransomware, and phishing as the top sources of security attacks.
Less than half of organizations (48%) have a concrete plan to protect against ransomware.
Data breaches remain high: almost a third have experienced a data breach in the last 12 months.
The vast majority (79%) of organizations remain concerned about the security risks associated with the rise of remote work.
51% of IT leaders agree that managing data protection and privacy regulations is more complex in a cloud environment.
PARIS LA DEFENSE, March 23, 2022–(COMMERCIAL WIRE)–A new study from Thales finds that malware, ransomware and phishing remain a threat to global businesses. In fact, one in five businesses (21%) were affected by a ransomware attack in the last year, and 43% had a significant operational impact.
This press release contains multimedia content. See the full announcement here: https://www.businesswire.com/news/home/20220323005017/en/
The frequency and impact of ransomware attacks, which first appeared in the late 1980s with the PC Cyborg virus, have accelerated with the increased use of cryptocurrencies as the payment method of choice for ransomware. The 2022 Thales Data Threat Report, conducted by 451 Research, part of S&P Global Market Intelligence, shows that a fifth (22%) of the more than 2,700 global IT decision-makers surveyed say they would or would have paid a ransom for your data. Still, 41% of respondents say they have no plans to change their security spending, even as the impact of ransomware increases.
Additionally, less than half of respondents (48%) have implemented a specific ransomware plan. Healthcare was the best and prepared with a plan at 57%, while energy was the worst at 44%, despite both sectors having suffered significant security breaches in the last 12 months.
Data transparency is a challenge
As more organizations adopt multi-cloud strategies and hybrid working becomes the norm, IT leaders continue to deal with the proliferation of data in their organizations and find it increasingly difficult to locate all of their data. Just over half (56%) of IT leaders were very confident or knew exactly where their data was stored. In the previous year it was still 64%1and only a quarter (25%) say they were able to classify all of their data.
Compliance Threats and Challenges
Security incidents continued to be high in 2021, with almost a third (29%) of organizations experiencing a security breach in the last 12 months. Additionally, nearly half (43%) of IT leaders report failing a compliance audit.
Global IT leaders cite malware (56%), ransomware (53%), and phishing (40%) as the top sources of security attacks. Managing these risks is a constant challenge. Nearly half (45%) of IT leaders report an increase in the volume, severity, or scope of cyberattacks in the past 12 months.
The cloud increases complexity and risk
Cloud adoption is growing, with more than a third (34%) of respondents saying they use more than 50 software-as-a-service (SaaS) applications, and 16% use more than 100 applications. However, 51% of IT leaders agree that managing data protection and privacy regulations is more complicated in a cloud environment than in their organization’s on-premises networks, up from 46% last year.
The 2022 Data Threat Report also shows that companies are increasingly storing their data in the cloud. 32% of respondents say around half of their workloads and data reside in external clouds, with a quarter (23%) reporting more than 60%. However, 44% of respondents say their cloud environments have experienced a security breach or failed an audit.
In addition, the use of encryption to protect sensitive data is low, with only half of respondents (50%) saying that more than 40% of their sensitive data is encrypted, and a fifth (22%) saying that more than 60% they are encrypted. This represents a significant risk for companies.
Concerns about mobile work
Another year of remote work has shown that managing security risks is a huge challenge for organizations. Worryingly, the majority of organizations (79%) are still concerned about the risks and security threats posed by remote work. Only half of IT leaders (55%) say they have adopted multi-factor authentication (MFA), a number that has not changed from the previous year.two.
However, the report also reveals that IT leaders have vastly different priorities when it comes to technology spending, suggesting that they are serious about combating complex threat environments. A quarter (26%) say that comprehensive cloud security tools are the top priority for future spending. A similar number of IT leaders (25%) say they prioritize key management, with Zero Trust3 it is an important strategy for 23%.
IT leaders are also increasingly aware of the challenges ahead. Looking ahead, when asked about security threats from quantum computing, 52% of respondents say they are concerned about the threat “of today’s data being cracked tomorrow,” a concern fueled by the growing complexity of cloud environments that should be further strengthened.
Sebastien Cano, SVP of Cloud Licensing and Protection at Thales, comments: “As the pandemic continues to affect our business and personal lives, any expectation of a “return” to pre-pandemic conditions has faded. As teams around the world continue to face challenges protecting their data, our findings show that companies urgently need to take action. Actions to Develop Stronger Cybersecurity Strategies Data management and attack surface challenges will only increase in the coming year, and it is critical that businesses develop a robust security strategy that focuses on detection, protection, and attack. control”.
Thales and 451 Research will discuss the results in more detail in a webinar on March 31, 2022. To participate, please visit the registration page.
About the Thales Global Data Threats Report 2022
The Thales Global Data Threats Report 2022 is based on a global survey commissioned by Thales in January 2022 by 451 Research of more than 2,700 executives responsible for or affecting IT and data security. Respondents came from 17 countries: Australia, Brazil, Canada, France, Germany, Hong Kong, India, Japan, Mexico, the Netherlands, New Zealand, Singapore, South Korea, Sweden, the United Arab Emirates, the United Kingdom, and the United States. The organizations represented a variety of industries, with a focus on healthcare, financial services, retail, technology and government. Job titles ranged from C-level executives such as CEO, CFO, chief data officer, CISO, chief data scientist, and chief risk officer to senior vice president, IT administrator, security analyst, security engineer, and security administrator. systems. Respondents represented a wide range of company sizes, most with between 500 and 10,000 employees.
Thales (Euronext Paris: HO) is a world leader in cutting-edge technologies, investing in digital and “deep tech” innovations (connectivity, big data, artificial intelligence, cybersecurity and quantum technology) to create a secure future that will drive development . of our society is essential. The customer base includes companies, organizations, and governments in the fields of defense, aerospace, transportation, and digital identity and security. Thales Group products, services and solutions help them fulfill their core role by respecting the individual as the driving force behind all decisions. Thales has 81,000 employees in 68 countries. In 2021, the group generated sales of €16.2 billion.
1 Compared to data from the 2021 Thales Data Threat Report conducted from January to February 2021.
two Compared to data from the 2021 Thales Data Threat Report conducted from January to February 2021.
3 Zero Trust is a strategic approach to cybersecurity that protects an organization by removing implicit trust and continually reviewing every phase of a digital interaction.
I Respondents indicated that between 41% and 60% of their workloads and data reside in external clouds.
View the original version on businesswire.com: https://www.businesswire.com/news/home/20220323005017/en/
Thales, media relations