1 in 5 organizations unable to recover their data after a cyberattack
Cyberattacks are increasingly paralyzing organizations. New research shows that one in five organizations affected by a cyber incident are unable to recover their stolen, encrypted or lost data.
According to a report by NetApp in collaboration with Futurum Research of more than 1,300 cybersecurity leaders, 54% of organizations suffered a cyberattack in the last 12 to 18 months, and a fifth were unable to bounce back and recover. its data.
“The findings clearly highlight the urgency for organizations to rethink their cybersecurity strategies in an era of increasing threats,” said Gagan Gulati, general manager of data services at NetApp.
“To reduce risk and ensure faster recovery, businesses must adopt an intelligent data strategy that prioritizes secure infrastructure by design, integrating security at the heart of their data management approach.
“As data is an organization’s most valuable asset, resilient storage solutions, such as those offered by NetApp, are the last line of defense in an overall security strategy, protecting critical information and enabling business success. long term in hybrid multi-cloud environments. »
When it came to not being able to recover, 60% of organizations found data identification to be their biggest problem. Additionally, of those who were unable to recover data, only 20 percent had data classification, while 52 percent of those who were able to recover had data classification.
Operational complexity has also been found to be a contributing factor to data breaches. Seventy percent of organizations reported using more than 40 cybersecurity tools, while 84 percent said tool richness was an issue, increasing complexity and thereby creating gaps and vulnerabilities.
Particularly in cloud environments, vulnerabilities and breaches pose a major risk. For 38-40% of respondents, cloud security risks were the top threat, ahead of traditional attack vectors like ransomware.
AI also introduces new cybersecurity challenges. While 92% of respondents said they would increase AI projects in the next 12 to 18 months, one in four said they have “limited/partial visibility” into sensitive data access permissions .
“Our biggest problem is the proliferation of sophisticated threats and attacks. And by that I mean we’re starting to see a shift in the world of old-school cybersecurity threats, which would exploit existing vulnerabilities, social attacks, things like that,” one interviewee said.
“We’re starting to see this very worrying trend moving into AI, where AI models, very broad machine learning paradigms, are being used to exploit not just weaknesses in software, weaknesses in social engineering or directly spam-based threats, but we I’m starting to see [AI widening] the gap to the point that our CISO, who is very knowledgeable about cybersecurity, has reached out to me on a few cases so far in the last couple of weeks to show me some of the attempts he sees on a broader level. »
Addressing these concerns, almost all (over 90%) of respondents indicated they would increase their cybersecurity spending over the next 12 to 18 months.
