Larger organizations may have bigger cybersecurity budgets and IT teams, but those aren’t the only paths to building successful security programs. There’s evidence that security teams in small and midsize businesses (SMBs) are doing a better job in enabling the mission of their organizations, according to the Cisco 2021 Security Outcomes Study: Small and Midsize Business Edition.
For example, 44% of SMBs say their security teams are keeping pace with the changing needs and growth of the business, compared with 42% of large enterprises. This may seem like a small difference, but SMBs are achieving it with fewer resources.
“Small and midsize businesses tend to be more agile and have the benefit of fewer degrees of separation between business and IT,” says Wolfgang Goerlich, an advisory CISO at Cisco Secure. “That means security professionals have a direct line to understanding business objectives and can ensure security measures stay in lock-step with growth plans.”