The 2024 Kaseya Security Survey Highlights that Human Error Remains the Top Cyber Security Threat
Kaseya, a leading global provider of AI-powered cyber security and IT management software, has unveiled the results of its 2024 Security Survey. The findings highlight that human error is still the weakest link in cyber security. However, IT professionals are also grappling with the implications of artificial intelligence in the field.
Human Error: People are the Problem
The survey reveals that 89% of IT professionals identify user behaviour as their primary cyber security threat. Poor user practices and a lack of end-user training are cited as the main culprits, with 45% pointing to gullibility and 44% to insufficient training. Phishing attacks top the list of cyber security threats impacting businesses at 58%, followed by computer viruses or malware at 44%, and business email compromise at 34%.
AI: Beyond the Hype
AI’s role in cyber security is a hot topic, with mixed feelings among IT professionals. While cybercriminals are using AI to launch more sophisticated attacks, over half of the survey participants believe AI can enhance security. However, one-third remain uncertain about AI’s impact, indicating a need for more research and clarity on its benefits and limitations.
Decline in Ransomware Payouts
Interestingly, the survey notes a decline in ransomware payouts, with only 11% of companies admitting to paying ransoms. This trend is attributed to increased investments in backup and recovery technologies, which have mitigated the impact of attacks. Additionally, there is a growing awareness that paying ransoms is not a best practice.
Tools and Strategies to Combat Cyber Security Threats
The survey highlights the adoption of various cyber security frameworks, with NIST (40%) and Zero Trust (36%) being the most popular. IT professionals are implementing a range of security solutions, including antivirus software (87%), email/spam protection (79%), and file backup (70%). Despite having incident response plans, only 37% of respondents conduct periodic drills to test their efficacy, down from 46% last year.
Pentesting is another critical tool, with over two-thirds of respondents conducting tests at least twice a year. However, cost and budget constraints (58%), resource limitations (18%), and IT staffing issues (12%) remain significant challenges.
Rising Adoption of Cyber Insurance
As cyberattacks increase, so does the adoption of cyber insurance, with coverage now at 61%, up from 27% in 2023. Additionally, 41% of organisations plan to invest in cyber insurance within the next 12 months.
Future Investments in Cyber Security
IT budgets appear stable, with over 80% of respondents expecting their IT security budget to remain the same or grow in the next year. Key investment areas include cloud security (33%), automated pen-testing (27%), network security (26%), security awareness training (26%), and vulnerability assessment (26%). Endpoint detection and response (EDR) and managed security operations center (SOC) and Managed Detection and Response (MDR) are also on the list.
Concerned about Cyber Security Threats?
We’re here to help you strengthen your cyber security, reach out to us on 0818 987 900 or at hello@intuity.ie
To stay up-to-date with the latest tech news and solutions, subscribe to our newsletter.
To learn more about cyber security threats, register for our Intuity Insights Live! event at the Radisson Red, Galway on March 12. This session, focused on “Empowering Leaders with Cyber Security, AI & Building Team Resilience,” features Jason Manar, Chief Information Security Officer at Kaseya and former FBI Supervisory Special Agent will discuss the rising intensity and sophistication of cyber attacks and how this reality underscores the importance of cyber resilience. Places are limited!