{"id":28858,"date":"2022-09-22T10:15:31","date_gmt":"2022-09-22T14:15:31","guid":{"rendered":"https:\/\/www.itworldcanada.com?p=504284"},"modified":"2022-09-23T10:25:50","modified_gmt":"2022-09-23T14:25:50","slug":"canadian-smbs-employees-criticized-for-poor-cybersecurity-practices","status":"publish","type":"post","link":"https:\/\/technewsday.com\/staging\/canadian-smbs-employees-criticized-for-poor-cybersecurity-practices\/","title":{"rendered":"Canadian SMBs, employees criticized for poor cybersecurity practices"},"content":{"rendered":"<p data-ar-index=\"0\">Employees at small and medium-sized Canadian organizations have been given a \u201cC\u201d rating for their knowledge of cyber safety and awareness.<\/p>\n<p data-ar-index=\"1\">The rating comes from the Insurance Bureau of Canada, which, after surveying 1,525 workers at companies with fewer than 500 employees, concluded firms have been slow to adapt to increasingly frequent and sophisticated cyber attacks.<\/p>\n<p data-ar-index=\"2\">Among what the bureau called \u201cstartling\u201d findings:<\/p>\n<ul type=\"disc\">\n<li>only a third of respondents (34 per cent) said their company provides mandatory cyber security awareness training;<\/li>\n<li>only half of respondents said their organization has introduced multi-factor authentication;<\/li>\n<li>only a quarter of respondents (24 per cent) said their employer conducts phishing email simulations to help promote cyber vigilance.<\/li>\n<\/ul>\n<p data-ar-index=\"3\">Just under three-quarters of respondents (72 per cent) said they have done something that could allow a cybercriminal to gain access to their company\u2019s computer systems. For example:<\/p>\n<ul type=\"disc\">\n<li>27 per cent said they use one password to access multiple websites they use for work;<\/li>\n<li>23 per cent access public Wi-Fi while using their work computer;<\/li>\n<li>19 per cent said they download software\/apps on their work devices that were not provided by their employer;<\/li>\n<li>7 per cent allow family members or friends to use their work computer; and<\/li>\n<li>5 per cent share their work login or password by email or text.<\/li>\n<\/ul>\n<p data-ar-index=\"4\">The survey results, called a <a href=\"https:\/\/cybersavvycanada.ca\/docs\/Cyber-Savvy-Report-Card.pdf\" rel=\"noopener\">Cyber Savvy Report Card<\/a>, were released in advance of October\u2019s cybersecurity awareness month.<\/p>\n<p data-ar-index=\"5\">To help raise awareness, the bureau launched <a href=\"https:\/\/cybersavvycanada.ca\/\" rel=\"noopener\">cybersavvycanada.ca<\/a>, to help small business owners and their employees better understand the threat of cyber attacks and what they can do to reduce their risk.<\/p>\n<p data-ar-index=\"6\">\u201cEveryone has a role to play in reducing cyber threats in the workplace,\u201d said Celyeste Power, the insurance bureau\u2019s executive vice-president for strategic initiatives and advocacy. \u201cWhile cyber insurance is an important backstop for businesses in the event of a cyber breach, it should be thought of as one component within a complete cyber risk mitigation strategy aimed at reducing an organization\u2019s vulnerability to online threats.\u201d<\/p>\n<p data-ar-index=\"7\">Employees may also underestimate the role they play in their organization\u2019s cyber defences, the bureau said. It notes that 30 per cent of respondents said they don\u2019t believe cybercriminals would target them at work, while 28 per cent of respondents said their employer is solely responsible for protecting their workplace from cyber threats.<\/p>\n<p data-ar-index=\"8\">Twenty-one per cent of respondents believe that most cyber breaches are minor and easy to resolve. \u201cThe reality,\u201d the bureau said in a news release accompanying the results, \u201cis that they can have a devastating financial impact.\u201d <a href=\"https:\/\/www.itworldcanada.com\/article\/average-cost-of-a-data-breach-to-canadian-firms-studied-hit-7-million-says-ibm\/494735\" rel=\"noopener\">Citing IBM\u2019s latest annual cost of a data breach report<\/a>, the bureau notes that in 2021, the average total cost of a data breach to Canadian organizations was an estimated $7.3 million.<\/p>\n<p data-ar-index=\"9\">The insurance bureau has a stake in the cybersecurity of customers with cyber insurance. As a result of rising claims and payouts, insurers have been raising premiums, restricting coverage, and demanding customers toughen their cyber defences,<a href=\"https:\/\/www.itworldcanada.com\/article\/fewer-insurers-offering-cyber-coverage-and-its-harder-to-get-says-sophos-ransomware-report\/481371\" rel=\"noopener\"> according to a global survey released last month.<\/a><\/p>\n<p data-ar-index=\"10\">The post <a href=\"https:\/\/www.itworldcanada.com\/article\/canadian-smbs-employees-criticized-for-poor-cybersecurity-practices\/504284\">Canadian SMBs, employees criticized for poor cybersecurity practices<\/a> first appeared on <a href=\"https:\/\/www.itworldcanada.com\/\">IT World Canada<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A survey by the Insurance Bureau of Canada suggests only half of firms use multifactor authentication. 19 per cent of respondents said they download unapproved apps on wo<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[16,369],"tags":[486,391,660,396,393,275],"class_list":["post-28858","post","type-post","status-publish","format-standard","hentry","category-security","category-smb","tag-cyber-insurance","tag-di","tag-insurance","tag-postmedia","tag-security-strategies","tag-top-story"],"acf":[],"_links":{"self":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/28858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/comments?post=28858"}],"version-history":[{"count":2,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/28858\/revisions"}],"predecessor-version":[{"id":28907,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/28858\/revisions\/28907"}],"wp:attachment":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media?parent=28858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/categories?post=28858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/tags?post=28858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}