Over Half (55%) of US IT and Security Professionals Surveyed Not Prioritizing Email Security, Despite Almost 9 in 10 (88%) Experiencing Successful Attacks in the Last Quarter

Report highlights need to plug the gap created by lack of skills, budget and inadequate technology

NEW YORK–(BUSINESS WIRE)–Email security specialist Libraesva today released its “Email Security: The Reality Gap” report, which reveals over half (55%) of US IT and security professionals surveyed are not prioritizing email as a source of attack to secure their organization against. This is despite almost 9 in 10 (88%) of respondents reporting their organization had experienced a successful attack in the last quarter, and that email was the leading entry point that attacks had increased from.

The research was carried out by Censuswide in April 2024 who surveyed 526 US CISOs, security and IT professionals aged 18+ in companies with 500-5,000 employees.

Other key findings from the survey include:

• Spend gap: Half of US IT and security professionals surveyed (51%) said that their organization’s budgets for email security for last year stayed the same or decreased.
• Talent gap: Over 3 in 5 (63%) respondents agreed that email security resource is understaffed in their organization. When asked about skillset, 62% agreed they lacked email security resources with the right skills and over half (55%) agreed that they faced challenges in finding the talent to deal with evolving email threats, yet almost two-thirds (64%) recognized that this gap is leaving them more vulnerable to threats.
• Technology gap: The top five email related threats US IT and security professionals surveyed stated that they are most concerned about were:
  
  – Malware and spam (33%)
  
  – Ransomware (26%)
  
  – Email data leaks (26%)
  
  – Malicious URLs and dangerous attachments (26%)
  
  – Phishing, spear phishing and whaling (25%)

But when asked if their current email security system protects against these threats only just over 2 in 5 (43%) said they were confident when it comes to email data leaks, only 42% on malware and spam, and under 2 in 5 were confident on it defending against threats from ransomware (35%), malicious URLs and dangerous attachments (38%), and phishing, spear phishing and whaling (36%).

Also of note was that while almost a quarter of the survey (23%) said they were concerned about AI attacks, 71% lacked confidence that their current email security system could defend against such attacks.

Commenting on the findings, Paolo Frizzi, Founder and CEO, Libraesva said: “Modern business relies on email making its security business-critical, but it is a battleground for bad actors and the volume and complexity of attacks is ever increasing. Our report shows that despite US CISOs, security and IT professionals experiencing increases in attacks from email and being aware of the risks, they aren’t prioritizing email sufficiently in their security strategies, with alarming gaps that need to be plugged in terms of budget, resource and technology. Not only are they vulnerable to established email threats, but they are also unprepared for the wave of advancing AI-generated attacks. US businesses should take action now to shore up their defenses or risk the damage from ever growing attacks.”

For full analysis, read the Email Security: The Reality Gap report here: https://info.libraesva.com/email-security-reality-gap

About Libraesva

Libraesva is an award-winning email security specialist that empowers enterprises to eliminate email-borne threats, preserve email data and provide an environment for their people to communicate safely. The company’s mission is to educate and protect global organizations and their employees against increasingly deceptive and difficult to identify attacks. Libraesva simplifies email security with an integrated suite of security, continuity and compliance solutions. Founded in 2013 and headquartered in Italy, with offices in London and Seattle, Libraesva is trusted by leading brands around the world.

Learn more at www.libraesva.com

About Censuswide

Censuswide is an international market research consultancy headquartered in London. The survey consisted of 526 CISOs, Security VPs and Directors and IT Manager & Directors in companies with 500-5,000 employees in the US aged 18+. Data collected between April 19, 2024 to April 22, 2024.

Censuswide abides by and employs members of the Market Research Society and follows the MRS code of conduct and ESOMAR principles. Censuswide is also a member of the British Polling Council.

Contacts

Kishan Mistry

libraesva@teamgingermay.com
+44 (0)203 642 1124