The Digital Security Authority, within the framework of its responsibilities, has conducted two nationwide investigations to collect data and information on cybersecurity in the Cypriot territory. The main issues assessed concerned the way cybersecurity and/or digital security issues are handled, assessment of the importance attached to these issues, how cyber-attack incidents are dealt with, as well as the consequences of incidents. The first survey was addressed to businesses and the second to citizens. The two surveys were conducted in parallel in October-November 2022 on a sample of 1025 citizens and 450 businesses from a wide range in the industrial, commercial and service sectors.
The main results of the surveys, which were presented at the stakeholders and authorities meeting held on 30 November 2022, were as follows. [*]Of the businesses that have been attacked, for almost half (48%) there has been a financial cost amounting to almost €23,000 on average. [*]The most common attack on businesses is phishing, i.e. misleading emails, with 36%. [*]Almost one in five businesses have not created, updated or revised their cybersecurity policies to keep up with technological developments for more than two years. [*]There is a lack of awareness among businesses of seminars offered on cybersecurity as half of businesses are unaware of it and only 17% have attended such seminars. It is worth mentioning that those companies that participated in a seminar were made aware and took actions and measures to strengthen their security measures.
Citizens
[*]40% of citizens have been attacked in the last 12 months with an average of 20.9 breaches/attacks per year. [*]Of the citizens who were attacked, 19% incurred some cost, averaging €318. [*]The most common attack received by citizens is phishing i.e. misleading emails with 30%. [*]In the case of citizens who have not been attacked/violated in the last year, 82% do not exclude the possibility of being a victim of a malicious attack in the future. [*]There is a lack of awareness among citizens about offered seminars on cybersecurity issues as 82% of citizens are unaware of them, while only 9% have participated in them. Through the survey it became apparent that after attending seminars, the most important changes they made were using strong passwords, changing passwords frequently and avoiding suspicious websites.
Based on the above results, the Digital Security Authority intends to organise training seminars to enhance cybersecurity knowledge and skills as well as information and awareness campaigns in the near future for both citizens and businesses. These surveys constitute a first mapping of the cybersecurity picture and it is expected that the data will be collected annually over time and that the questionnaires will be enriched based on developments and information needs as they arise.
The detailed results of the surveys are available in power point format at the link below: https:/dsa.cy/category/press-releases/consumers-survey
(ΕΠ/ΣΧ)
Contents of this article including associated images are owned by PIO
Views & opinions expressed are those of the author and/or PIO
Source
