Large enterprises pushing cyber security standards down their supply chains.

In today’s digital landscape, small to medium sized businesses are increasingly targeted by cyber criminals due to perceived weaker defenses. In fact, according to ScalePad, 90% of breaches are in these SMBs - where there has often been a ‘it won’t happen to me' mind set along with a resistance to implement Governance, Risk, and Compliance (GRC) frameworks due to cost and time requirements.

Not only can the breach have a crippling impact on the SMB (according to a UK study 60 per cent of small businesses will close within six months of an attack), it clearly impacts the supply chains they are in and hence many global enterprises.  

Implementing Information Security Management Systems (ISMS) and complying with GRC frameworks and certifications such as CMMC (Cybersecurity Maturity Model Certification) continues to be a must have.  For many SMBs this can seem a challenging journey but with many cybersecurity training packages available and with support to implement standards such as ISO 27001 then this journey can be navigated more easily than initially perceived.