As the years go by, data loss damages suffered by Spanish SMEs are clearly on the rise. Cybercrime is big business today for many cybercriminals, who take advantage of security breaches to profit financially, using tools such as ransomware. In these scenarios, the security systems in place in companies are the only barriers that stand between cybercriminals and our systems and data, and are therefore indispensable elements for our survival as a business. Within this security ecosystem, which is increasingly being talked about, we must be very clear that there is always the possibility that all the measures we have taken could fail and, therefore, it is necessary to have an anti-disaster recovery plan.

What is the right security ecosystem for my company?

Obviously, the answer to this question depends on the type of company we are talking about, but there are common points to consider, regardless of size, sector or environment. The starting point is to develop a security ecosystem in the company, based primarily on a proper employee education and training programme, which is fundamental and critical as the weakest link in the chain. Secondly, we must incorporate the appropriate protection, security and shielding measures, generated technologically and which we can adapt to our needs. Finally, once the main training methods and security systems are in place, we must always have a contingency plan that allows us to recover our productive capacity, should all of the above fail. Data recovery in the event of a disaster, such as a cyber-attack, is a fundamental, almost mandatory, aspect of a modern SME. Being able to recover our data, from recent backups and in a very short time, can be the turning point that marks the continuity of our business.

Some interesting facts

According to a recent study by the consulting firm Deloitte, 94% of Spanish companies have suffered at least one serious cybersecurity incident during 2021, which represents an increase of more than 25% over the previous year. According to this study, ransomware and phishing continue to lead as the most common forms of threats, with 18% and 19% respectively, followed by malware, with 14%. Other industry studies indicate that globally, 66% of companies report having been attacked in the past year, compared to 37% in 2020.

---

This sharp increase in the number of companies affected during 2021 is expected to continue to grow exponentially as 2022 progresses. Moreover, the current geopolitical scenario is the ideal breeding ground for cybercrime to increase in a truly worrying way, with alarming results in any type of company, regardless of size, sector or location.

---

All these companies that have suffered cyber-attacks and, specifically, those that have suffered ransomware attacks, have a direct consequence: kidnapping of their data, production stoppage and, therefore, stoppage of their economic activity. The only way to recover this data is to resort to backup copies or to pay the ransom, but, in order to be able to do this recovery from the backup copies and not be blackmailed by cybercriminals, they must have been made correctly and must not have been affected by the cyberattack.

---

Different data indicate that 38% of Spanish companies that suffered the encryption of their data, paid the ransom to recover it, even though they had other means of recovery such as backups. This was because, in many cases, those backups showed recovery problems.

What is the cost for an SME?

The cost of recovery by paying ransom to cybercriminals is multiplying from year to year and has reached worrying figures. According to data analysed, over the past year and for Spanish SMEs, this has reached an average of more than €700,000 per ransomware. It is clear that investment in technology, employee education and preventive measures to prevent these cyber-attacks is a guaranteed investment, both from the point of view of proactive measures to prevent and limit the spread of such an attack, as well as measures that allow the restoration of data from a recent backup and very quickly, in case all else fails.

---

Having a plan B is the best option on the market right now to ensure recovery and eliminate the uncertainty factor. So, ask yourself a simple question, are you absolutely sure that you have an adequate security ecosystem in place to allow you to continue your business and not incur insurmountable losses in the event of a cyber-attack? If the answer is "maybe" or "not sure", don't hesitate. You should be prepared.

---

Integrated anti-disaster recovery solution, with total anti-malware and anti-ransomware immunity. Sermicro Group Systems Area / Syneto