Cybersecurity Survey (Small Businesses) (2016)


This detailed cybersecurity survey explores the challenges of small businesses in 2016, emphasizing the increasing threat of cyber-attacks. It covers key findings on the level of preparedness among smaller organizations and offers practical, framework-based solutions tailored to meet their unique needs. Discover how cybersecurity risks can impact business operations and learn the steps small businesses can take to fortify their defenses.


Cybersecurity has become a critical issue for businesses of all sizes. However, small businesses are especially vulnerable to cyber-attacks, often facing significant risks without the proper resources or knowledge to protect themselves. In 2016, a detailed cybersecurity survey was conducted to assess how small businesses were managing these risks, uncovering key insights into their preparedness and the potential threats they faced.

Despite the increasing frequency and sophistication of cyber-attacks, many small businesses have not taken the necessary steps to secure their operations. Small businesses, which make up over 97% of companies in North America, are essential components of the global supply chain, often supporting larger enterprises in critical sectors such as healthcare, finance, and utilities. As such, their exposure to cyber threats also poses risks to larger organizations, further highlighting the importance of comprehensive cybersecurity measures.

Unfortunately, a significant portion of small businesses underestimate their vulnerability. The cybersecurity survey revealed that 77% of small business owners believed their company was not at risk, despite the fact that 43% of all cyber-attacks targeted businesses with fewer than 250 employees in 2015. This lack of awareness, combined with limited resources, leaves these businesses exposed to significant operational and financial damage.

The consequences of a cyber-attack on small businesses can be devastating. From service disruptions and financial losses to reputational damage, many companies struggle to recover from such incidents. The survey found that 42% of small businesses impacted by cyber-attacks reported an average loss of $32,000, with some estimates reaching as high as $188,000 per attack. This level of financial strain can cripple small organizations, pushing them to the brink of closure.

To address these challenges, the survey suggests that small businesses adopt more robust cybersecurity frameworks, such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework. These frameworks provide a structured approach to identifying, protecting, and responding to cyber threats. Moreover, small businesses can take advantage of simple, practical steps—like employee training, threat detection systems, and incident response plans—to significantly enhance their cybersecurity posture without overwhelming their resources.

Ultimately, the findings of this 2016 cybersecurity survey emphasize the urgent need for small businesses to prioritize cybersecurity. By implementing targeted solutions and frameworks, even resource-constrained organizations can protect themselves from the growing threat of cyber-attacks, ensuring their long-term success and safeguarding their role in the larger business ecosystem.

Main Contents

  • Overview of cybersecurity risks faced by small businesses in 2016.
  • Detailed analysis of common misconceptions about cyber threats.
  • Data on the financial impact of cyber-attacks on small businesses.
  • Recommended cybersecurity frameworks and best practices for smaller organizations.
  • Practical steps to improve cybersecurity without overwhelming resources.

Key Takeaways

  • Small businesses are increasingly targeted by cyber-attacks, yet many underestimate their vulnerability.
  • The financial impact of cyber-attacks can be severe, with losses reaching up to $188,000 per incident.
  • Adopting established cybersecurity frameworks like NIST can provide essential protection.
  • Lack of awareness, resources, and preparedness leaves many small businesses exposed.
  • Simple, cost-effective cybersecurity measures can significantly reduce the risk of attacks.

CIOs and IT leaders are often tasked with safeguarding their organizations from the growing threat of cyber-attacks, particularly when dealing with resource-constrained environments like small businesses. This cybersecurity survey serves as a valuable resource for these leaders, offering data-driven insights and actionable strategies that can be applied to solve real-world cybersecurity challenges.

  • Assessing Cybersecurity Vulnerability: CIOs can use the data from the survey to benchmark their organization’s awareness and preparedness against the identified vulnerabilities and risks faced by small businesses.
  • Prioritizing Cybersecurity Frameworks: The survey emphasizes the importance of adopting industry-standard frameworks like NIST. IT leaders can use this information to prioritize the implementation of such frameworks, guiding their organizations toward more robust cybersecurity practices.
  • Budgeting for Cybersecurity Investments: The financial loss data presented in the survey helps CIOs justify cybersecurity budgets, demonstrating the potential costs of inaction versus the relatively lower costs of prevention and protection measures.
  • Educating Employees on Cyber Risks: IT leaders can leverage the insights from the survey to design targeted cybersecurity training programs for employees, addressing the misconceptions and false sense of security prevalent in many small organizations.
  • Developing Response Plans: The practical steps outlined in the survey can assist CIOs in crafting incident response plans, ensuring that their organizations are prepared to detect, respond to, and recover from cyber-attacks.



Signup for Thought Leader

Get the latest IT management thought leadership delivered to your mailbox.

Mailchimp Signup (Short)
Cioindex No Spam Guarantee Shield

Our 100% “NO SPAM” Guarantee

We respect your privacy. We will not share, sell, or otherwise distribute your information to any third party. Period. You have full control over your data and can opt out of communications whenever you choose.

Join The Largest Global Network of CIOs!

Over 75,000 of your peers have begun their journey to CIO 3.0 Are you ready to start yours?
Join Short Form
Cioindex No Spam Guarantee Shield