Companies are planning to increase their investments in information security against the background of growing financial losses from cyber incidents. This trend was revealed in the recent Kaspersky’s IT Security Economics report.
Kaspersky IT Security Economics is an annual report that unpicks the changes in budgets, breaches and business challenges affecting IT Security decision makers. It is based on interviews with IT and IT security professionals working in organisations of various sizes and industries. The survey was conducted across 27 countries in Europe, the Asia-Pacific region, the Middle East, Turkiye and Africa (META) region, Latin and North America.
According to the research, companies plan to increase their IT security budgets by up to 9%. The median cybersecurity budgets for large enterprises were $5.7M with $41.8M allocated for IT generally, while SMBs invested $0.2M in IT security from a median IT budget of $1.6M.
Possible reasons for the increased investment can be found in the analysis of financial losses from cyber incidents. Large enterprises experienced an average of 12 incidents this year, spending $6.2M to recover from them — 1.1 times higher than the budget allocated for IT security overall. Despite the greater resources and advanced security infrastructures, the sheer scale and complexity of large enterprise organisations make them more susceptible to costly breaches. While these enterprises are often better equipped to detect incidents quickly, the time required to fully respond and mitigate these threats can span for hours, underscoring the challenge of managing widespread, complex IT environments.
As for SMBs, these organisations experienced an average of 16 incidents this year, while spending $0.3M for remediation, which is 1.5 times higher than their overall IT Security budget. SMBs are the most disproportionately affected group in terms of budgetary impact. They often lack robust cybersecurity policies and procedures, which leaves them vulnerable to incidents involving employees, public cloud misconfigurations, and high-level permissions.
In the META region, organisations of all sizes reported to have experienced on average 13 incidents within a year. In South Africa, organisations of all sizes reported to have experienced on average 19 incidents within a year.
“This data illustrates the continuation of the current trend of increasing cybersecurity spending across all market segments. This growth is driven by at least three key factors. Firstly, and obviously, the constant growth in the complexity of cybersecurity threats forces companies to adopt more advanced solutions to enhance the detection of attack traces and automate responses. Secondly, increasing concerns from governments regarding digital sovereignty leads to the emergence of new regulations and regulatory requirements and, as a result, increased expenses. The third factor influencing the growth of cybersecurity budgets and costs is the constant increase in salary expectations for professionals in various cybersecurity fields,” comments Veniamin Levtsov, Vice President, Center of Corporate Business Expertise at Kaspersky.
To protect companies against a wide range of cyber threats, Kaspersky recommends:
- Use all-encompassing solutions, such as those from the Kaspersky Next (https://apo-opa.co/3VwBRnf) product line, that provide real-time protection, threat visibility, advanced investigation and response capabilities for companies of any size and industry.
- Adopt a managed security service such as Kaspersky Managed Detection and Response (https://apo-opa.co/49pxUXj) if companies lack qualified InfoSec professionals. It will provide the necessary expertise and give them the best possible advanced automated security services. Thanks to its analysis of corporate data gathered every day, in real time, 24/7, it can shield businesses against sophisticated cyberattacks.
- Educate your employees. Dedicated training courses can help, such as those provided in the Kaspersky Automated Security Awareness (https://apo-opa.co/3VtJyuu) Platform.
To gain more insights about IT security costs and budgets in businesses visit the interactive IT Security Calculator (https://Calculator.Kaspersky.com).
To read the full report “IT Security Economics”, that is based on a survey conducted in Brazil, Chile, China, Egypt, France, Germany, India, Indonesia, Italy, Japan, Kazakhstan, Saudi Arabia, Malaysia, Mexico, Pakistan, Philippines, Russia, South Africa, South Korea, Singapore, Spain, Thailand, Turkey, Vietnam, UAE, UK and US, visit the website (https://apo-opa.co/3Zp3ik9).
Africa Fact: The East Coast, from Somalia to Mozambique, has ruins of well over 50 towns and cities. They flourished from the ninth to the sixteenth centuries AD.
Africa Fact: Chinese records of the fifteenth century AD note that Mogadishu had houses of “four or five storeys high”.
Weldmaster
While studying to be a CA, Nicholas Bell developed a merchandising app for SAB (South African Breweries), once he built one solution, he quickly acquired more clients and by the time he was preparing to do his articles, SAB gave him a three-year deal as part of their merchandising programme. At 22, while still living with his parents, his first business comprising four people had a turnover of R700 000. By the second year, turnover grew to R1.6 million. After six years, his turnover was R21 million, he employed 25 people with clients including Simba, Harmony, ArcelorMittal, SAB, and Sibanye Gold. Eight years later, Bell hit R100 million, then pivoted the business to ensure they couldn\’t be disrupted. He implemented an investor-led strategy, which will see the business doing 40% of its work offshore with a R500 million turnover in five years.