Canadian organizations more aware, many exposed to cyber attacks
Survey finds 71% impacted by cyber incidents that disrupted operations.
OTTAWA — More attention, time and resources are being directed towards cybersecurity by Canadian private and public sector organizations, but many are still experiencing disruptions to business as a result of cyber attacks, according to a new survey.
The Canadian Internet Registration Authority (CIRA) has released its 2019 Cybersecurity Survey Report and it shows 71% of respondents reported they experienced at least one cyber attack that impacted the organization in time and resources, out of pocket expenses, and paying a ransom.
More than 500 IT specialists were surveyed about how they are coping with the increase in cyber threats. Highlights include the following:
• 96% said that cybersecurity awareness training was somewhat effective in reducing incidents, but only 22% conducted the training monthly or better.
• Only 41% have mandatory cybersecurity awareness training for all employees.
• Among those businesses that were victimized by a cyber attack, 13% indicated the attack damaged their reputation. This perception is a sharp contrast to the findings of CIRA’s recent report: Canadians deserve a better internet, which indicated that only 19% of Canadians would continue to do business with an organization if their personal data were exposed in a cyber attack.
• 43% of respondents were unaware of the mandatory breach requirements of the Personal Information Protection and Electronic Documents Act (PIPEDA).
• Of those businesses that were subject to a data breach, only 58% reported it to a regulatory body; 48% to their customers; 40% to their management and 21% to their board of directors.
• 43% who said they didn’t employ dedicated cybersecurity resource cited lack of resources as the reason. This is up from 11% last year.Private sector organizations represented 67 per cent of the sample, while public or not-for-profit organizations represented 33 per cent.
Private sector organizations represented 67% of the sample, while public or not-for-profit organizations represented 33%.