Answer:
Not always. Despite the growing risk, around 50% of SMBs still have no cybersecurity policy or budget in place. Many owners assume they’re too small to be a target, with nearly 60% believing their business isn’t at risk.
This underestimation leads to gaps in protection:
- Only 20% use multi-factor authentication (MFA)
- Fewer than a quarter of SMBs are confident in their ability to respond to a cyberattack
- Most do not provide regular security training to staff
It’s clear that while the threats are growing, the response from small businesses hasn’t caught up—putting them in a vulnerable position.