Small businesses aware of security risks, but not doing all they can to protect information

Interesting findings in a new Symantec survey of 1,425 small and medium businesses. Bottom line: Small and medium-sized businesses understand security risks, but a high percentage have failed to enact basic safeguards.

Here's the release:

Symantec Corp. released the findings of its 2009 Storage and Security in SMBs survey. The study found that while SMBs are familiar with cyber risks and have clearly defined goals for security and storage, a surprisingly high number have yet to take even the most basic steps towards protecting their businesses, such as implementing antivirus or backing up their data. The study is based on surveys of 1,425 small and medium businesses in 17 countries during the first quarter of 2009.

SMBs Understand the Problem
Our research shows that SMBs clearly understand the importance of security. While they do rate viruses as their top security worry, more than 70 percent also say they are somewhat/extremely concerned about spam and data breaches. Respondents also report that protecting their information, network and servers are their top goals (mentioned as somewhat/extremely important by at least 94 percent).

“Many small and midsized businesses are at a crossroads—aware of the need to strengthen their IT security infrastructure but unsure how to do so with limited resources,” said Kevin Murray, senior director, product marketing, Symantec. “As with their enterprise counterparts, security threats to small and midsized businesses are increasing in complexity, number and frequency, and the volume of information they must protect and maintain continues to expand.”

SMB Security Gap
Despite understanding the security risks they face, a surprising number of SMBs are neglecting basic safeguards. For example, three of five (59 percent) have not implemented endpoint protection (software that protects “end points” such as laptops, desktops and servers against malware). Forty-two percent of SMBs do not have an antispam solution. Almost half do not backup their desktop PCs, leaving their important information at risk. Finally, one-third of SMBs do not have the most basic protection of all -- antivirus protection.

“Of course SMBs know better, but they are too often focused on business opportunities outside the company to pay attention to the risks they are taking right at home,” said Ray Boggs, vice president of SMB research at IDC. “SMBs operate in a world full of risk, but many are taking unnecessary chances by failing to secure their data the way they should.”

Simple Protection Could Prevent Catastrophic Loss
According to the study, when SMBs do suffer IT loss, it is likely to be in an area where basic protection measures could have prevented loss.

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

• Email
• Print
• Share
  • Slashdot
  • Digg
  • Stumble
  • Reddit
  • Newsvine