GFI Software: cybersecurity audits are increasingly worthwhile for SMBs

Creators of supply chain attacks see SMBs as a gateway to large organizations

 

PRAGUE, July 26, 2023 – GFI Software, a provider of security solutions for enterprise networks, stated that, given the growing number of attacks on the SMB segment, more and more organizations are taking an interest in cybersecurity audits. According to current statistics, 56% of SMB companies are or have previously been targeted by some form of cyberattack, while up to three-quarters of malware passes undetected through the signature-based tools they use.

SMB companies are an easy target for attackers for several reasons. First and foremost, most small and medium-sized businesses do not have a sufficient budget to cover all IT risks, making it easier for attackers to achieve their goals. Most SMBs today also maintain only a minimal team of IT administrators or rely entirely on external IT security providers. Finally, SMBs are typically part of the supply chain of large companies and organizations, and hackers see SMBs as a gateway for lucrative supply chain attacks.

A cybersecurity audit is one of the proactive measures for reducing the risks of these attacks. The audit should identify the cybersecurity areas it should cover, as well as assess specific risks and implement appropriate measures.

Companies should include an assessment of the following, currently most significant security risks:

• DDoS attacks aimed at overloading IT infrastructure and putting it out of operation
• Social engineering targeting employees of SMB companies in order to obtain sensitive information
• Malware, especially ransomware, which encrypts data and enables hackers to extort their victims
• Password theft enabling cyberattackers to gain access to company systems and steal key information
• Zero-day vulnerabilities allowing signature-based antivirus systems to be bypassed in order to gain unauthorized access to internal systems

“A cybersecurity audit cannot be solved by a single product or tool; above all, it is a process requiring time, the effort of responsible staff, and consistent implementation of the necessary measures,” said Jozef Kačala, Vice President of Global Sales Engineering at GFI Software. “However, specific security tools such as GFI LanGuard can provide valuable inputs, including threat identification, an inventory of devices, systems, and software, and the level of their security, which significantly streamlines the entire process. Given the current level of security risks, such an audit is clearly worthwhile for an SMB organization.”