Saudi Companies Outsource Cybersecurity Amid ‘Serious’ Incidents

Saudi Companies Outsource Cybersecurity Amid 'Serious' Incidents

December 1, 2023 at 10:50AM

Over 50% of Saudi companies seek to outsource cybersecurity within 18 months, driven by tool shortages and staff scarcity. Kaspersky’s study found that 42% will turn to MSPs and 10% to consultants, amid reports of serious cyber incidents affecting 74% of businesses in the region.

**Key Takeaways from Meeting:**

1. **High Outsourcing Trend:** There is a significant trend among Saudi Arabian companies to outsource cybersecurity efforts within the next year, mainly due to resource constraints.

2. **Investment in Cybersecurity Outsourcing:** Approximately 58% of companies surveyed are planning to invest in various outsourcing options for cybersecurity within the next 12 to 18 months to enhance security measures.

3. **Reasons for Outsourcing:** Companies are considering outsourcing due to a lack of proper tools for detecting threats, cited by 22% of respondents, and a scarcity of in-house IT security personnel reported by 34% of respondents.

4. **Preferred Outsourcing Partners:** A notable 42% of respondents are looking to work with managed service providers for their cybersecurity needs, while 10% are seeking the assistance of external consultants.

5. **Incidence of Cyber Attacks:** A serious concern has been highlighted as 71% of Saudi companies experienced a cyber incident in the past two years, with 74% of these incidents classified as “serious.”

**Recommendations:**

– **Security Resource Allocation:** It’s advisable for companies to assess their cybersecurity resource needs and consider outsourcing as a viable solution to mitigate the risk of cyber threats.

– **Vendor Selection:** When choosing an outsourcing partner, companies should carefully evaluate the capabilities of managed service providers and consulting specialists to ensure they align with their security requirements.

– **Enhanced Vigilance:** Given the high incidence of serious cyber incidents, organizations should remain vigilant and proactive in their approach to cybersecurity, whether through building internal capacities or effective outsourcing strategies.

Full Article