drj logo

"*" indicates required fields

This field is for validation purposes and should be left unchanged.
Name*
Zip Code*
Please enter a number from 0 to 100.
Strength indicator
I agree to the Terms of Service and Privacy Policy*
Yes, of course I want to receive emails from DRJ!

Already have an account? Log in

drj logo

Welcome to DRJ

Already registered user? Please login here

Login Form

Register
Forgot password? Click here to reset

Create new account
(it's completely free). Subscribe

x
Skip to content
Disaster Recovery Journal
  • EN ESPAÑOL
  • SIGN IN
  • SUBSCRIBE
  • THE JOURNAL
    • Why Subscribe to DRJ
    • Digital Edition
    • Article Submission
    • DRJ Annual Resource Directories
    • Article Archives
    • Career Spotlight
  • EVENTS
    • DRJ Spring 2026
    • DRJ Fall 2026 Call for Presentations
    • DRJ Scholarship
    • Other Industry Events
    • Schedule & Archive
    • Send Your Feedback
  • WEBINARS
    • Upcoming Webinars
    • On Demand
  • MENTOR PROGRAM
  • RESOURCES
    • New to Business Continuity?
    • White Papers
    • DR Rules and Regs
    • Planning Groups
    • DRJ Glossary of Business Continuity Terms
    • Careers
  • ABOUT
    • Advertise with DRJ
    • Board and Committees
      • Executive Council Members
      • Editorial Advisory Board
      • Career Development Committee
      • DEI
      • Glossary Committee
      • Rules and Regulations Committee

Second Annual Cybersecurity Report from Devolutions Reveals Key Trends and Areas of Vulnerability for SMBs

by Jon Seals | November 16, 2021 | | 0 comments

72% Are More Concerned About Cybersecurity Now Than a Year Ago;

Remote Workers Increasingly Targeted

MONTREAL, November 16, 2021 – Today software developer Devolutions released a report titled, “The State of Cybersecurity in SMBs in 2021-2022,” which features stats and trends from Devolutions’ second annual cybersecurity survey. Also included in the report is a list of specific recommendations designed to help SMBs address the gaps, vulnerabilities and concerns uncovered in the survey. Key results will be highlighted on November 17 at Devolutions Central Online, a one-day virtual event for IT professionals.

A Global Issue

The consequences of a breach have never been more severe, with global cybercrime collectively totaling $16.4 billion USD each day. A recent study by IBM revealed that organizations with fewer than 500 employees had an average data breach cost of $2.98 million USD per incident in 2021. As has been reported, approximately 60% of small and mid-sized businesses (SMBs) go out of business within six months of getting hacked. Smaller companies are not exempt from cyberattacks; in fact, it’s quite the opposite. Yet many of the tools and resources that larger companies have at their disposal to protect them from cyberattacks are not befitting for smaller companies. There is a gap in the market.

About the Survey

To help SMBs grasp the scope of the current cyberthreat landscape – and assist them in making decisions that reduce the likelihood and severity of cyberattacks – Devolutions this year polled 440 IT professionals and decision makers at companies that self-identified as SMBs. Respondents included IT professionals across the globe – with the majority in North America and Europe – encompassing a variety of industries. The detailed questionnaire covered topics such as cyberattacks, cybersecurity training, cybersecurity investments, and the roles that privileged access management (PAM) and password management play in relation to cybersecurity.

Key Findings Revealed

While the pandemic forced many SMBs to scale back their operations, cyberattacks actually increased throughout 2020 and 2021 for small and midsize businesses. Remote workers in particular have been especially vulnerable to cyber threats since they reside outside of the corporate network environment. And with a large percentage of the workforce still working from home, this extends the threat surface and increases the likelihood of an attack.

Among some notable stats from the Devolutions cybersecurity survey:

  • 72% are more concerned about cybersecurity now than compared a year ago. 
  • 52% have experienced a cyberattack in the last year – and 10% have experienced more than 10 cyberattacks.
  • 40% do not have a comprehensive and up-to-date cybersecurity incident response plan. 
  • Only 13% have a fully deployed PAM solution in place.

It’s not all bad news, however. A few stats from the survey that reflect the cybersecurity progress being made by SMBs:

  • 92% have a process in place to revoke account access for ex-employees.
  • 74% are providing their workforce with cybersecurity training.
  • 71% are using a password manager to store passwords.

Says Devolutions CEO David Hervieux, “While progress is being made by many SMBs to improve their cybersecurity posture, there is still a lot of work to be done. A key takeaway for SMBs is to take immediate – but at the same time intelligent – action to reduce their risk. That’s why in our new report we’ve provided a series of practical, proven and affordable recommendations to help SMBs make informed decisions.”

The Role of MSPs

Managed services providers (MSPs) can play a vital role for SMBs when it comes to cybersecurity support. Since many SMBs don’t have the resources to hire several in-house IT / cybersecurity professionals, MSPs can shoulder a lot of that load, providing services to help reduce risk, enable growth opportunities, and support end users and customers alike.

For more information about Devolutions and their solutions, please visit devolutions.net. To download a copy of the “The State of Cybersecurity in SMBs in 2021-2022, visit this link.

About Devolutions

Established in 2010, Devolutions is a Canadian-based company located near Montreal, Quebec. With more than 800,000 users in over 140 countries, Devolutions is on a mission to develop innovative software that helps users cost-effectively, simply and effectively achieve their remote desktop management, password management, privileged access management, and cybersecurity goals. The company is also committed to providing exceptional technical support, ensuring an excellent user experience that exceeds expectations, and delivering high performance with superior quality. For more information about Devolutions and its solutions, visit devolutions.net, follow the company on LinkedIn, Twitter and Instagram, like on Facebook or subscribe on YouTube.

Related Content

  1. Integration of Cybersecurity into Physical Security Realm
  2. The State of Business Continuity Preparedness 2023
  3. Measuring, Reporting, and Improving: Making Resilience Tangible and Accountable
    Measuring, Reporting, and Improving: Making Resilience Tangible and Accountable

Recent Posts

Ransomware Attacks on Automotive and Smart Mobility More Than Doubled in 2025, According to New Research by Upstream Security

February 18, 2026

Keeper Security Brings Native Google Cloud Support to KeeperPAM for Unified, Multi-Cloud Privileged Access Management

February 18, 2026

AppSec Reality Check: 76% of Security Professionals Lack the Production Insight Needed to Secure Modern Applications

February 18, 2026

Pathlock Announces Integration with ServiceNow to Embed Risk-Aware Access Governance into Enterprise Workflows

February 18, 2026

New Open-Source SOC Grader Solves the MDR ‘Mean Time to Detect Poor Quality’ Problem

February 18, 2026

Virtana Unveils System-Aware MCP Server, Advancing Industry Shift from Fragmented Application Monitoring to End-to-End Enterprise AI Operations

February 18, 2026

Archives

  • February 2026 (52)
  • January 2026 (61)
  • December 2025 (45)
  • November 2025 (58)
  • October 2025 (78)
  • September 2025 (65)
  • August 2025 (59)
  • July 2025 (70)
  • June 2025 (54)
  • May 2025 (59)
  • April 2025 (91)
  • March 2025 (57)
  • February 2025 (47)
  • January 2025 (73)
  • December 2024 (82)
  • November 2024 (41)
  • October 2024 (87)
  • September 2024 (61)
  • August 2024 (65)
  • July 2024 (48)
  • June 2024 (55)
  • May 2024 (70)
  • April 2024 (79)
  • March 2024 (65)
  • February 2024 (73)
  • January 2024 (66)
  • December 2023 (49)
  • November 2023 (80)
  • October 2023 (67)
  • September 2023 (53)
  • August 2023 (72)
  • July 2023 (45)
  • June 2023 (61)
  • May 2023 (50)
  • April 2023 (60)
  • March 2023 (69)
  • February 2023 (54)
  • January 2023 (71)
  • December 2022 (54)
  • November 2022 (59)
  • October 2022 (66)
  • September 2022 (72)
  • August 2022 (65)
  • July 2022 (66)
  • June 2022 (53)
  • May 2022 (55)
  • April 2022 (60)
  • March 2022 (65)
  • February 2022 (50)
  • January 2022 (46)
  • December 2021 (39)
  • November 2021 (38)
  • October 2021 (39)
  • September 2021 (50)
  • August 2021 (77)
  • July 2021 (63)
  • June 2021 (42)
  • May 2021 (43)
  • April 2021 (50)
  • March 2021 (60)
  • February 2021 (16)
  • January 2021 (554)
  • December 2020 (30)
  • November 2020 (35)
  • October 2020 (48)
  • September 2020 (57)
  • August 2020 (52)
  • July 2020 (40)
  • June 2020 (72)
  • May 2020 (46)
  • April 2020 (59)
  • March 2020 (46)
  • February 2020 (28)
  • January 2020 (36)
  • December 2019 (22)
  • November 2019 (11)
  • October 2019 (36)
  • September 2019 (44)
  • August 2019 (77)
  • July 2019 (117)
  • June 2019 (106)
  • May 2019 (49)
  • April 2019 (47)
  • March 2019 (24)
  • February 2019 (37)
  • January 2019 (12)
  • ARTICLES & NEWS

    • Business Continuity
    • Disaster Recovery
    • Crisis Management & Communications
    • Risk Management
    • Article Archives
    • Industry News

    THE JOURNAL

    • Digital Edition
    • Advertising & Media Kit
    • Submit an Article
    • Career Spotlight

    RESOURCES

    • White Papers
    • Rules & Regulations
    • FAQs
    • Glossary of Terms
    • Industry Groups
    • Business & Resource Directory
    • Business Resilience Decoded
    • Careers

    EVENTS

    • Fall 2025
    • Spring 2026

    WEBINARS

    • Watch Now
    • Upcoming

    CONTACT

    • Article Submission
    • Media Kit
    • Contact Us

    ABOUT DRJ

    Disaster Recovery Journal (DRJ) is the leading resource for business continuity, disaster recovery, crisis management, and risk professionals worldwide. With a global network of more than 138,000 practitioners, DRJ delivers essential insights through two annual conferences, a quarterly digital magazine, weekly webinars, and a rich library of online resources at www.drj.com. Our mission is to empower resilience professionals with the knowledge, tools, and connections they need to protect their organizations in a fast-changing world. Join our community by attending our events, subscribing to our publications, and following us on social media.

    LEARN MORE

    LINKEDIN AND TWITTER

    Disaster Recovery Journal is the leading publication/event covering business continuity/disaster recovery.

    Follow us for daily updates

    LinkedIn

    @drjournal

    Newsletter

    The Journal, right in your inbox.

    Be informed and stay connected by getting the latest in news, events, webinars and whitepapers on Business Continuity and Disaster Recovery.

    Subscribe Now
    Copyright 2026 Disaster Recovery Journal
    • Terms of Use
    • Privacy Policy

    Register to win a Free Pass to DRJ Spring 2026 | The Future Runs on Resilience

    Leave your details below for a chance to win a free pass to DRJ Spring 2026 | The Future Runs on Resilience. The winner will be announced on March 6. Join us for DRJ's 74th Conference!
    Enter Now