(courtesy of Jacksonville Business Journal)
Small-to-medium businesses have been “left in the cold” by the cybersecurity industry, according to OnDefend co-founder Chris Freedman. By launching CyberSURE, OnDefend has set out to give these businesses an affordable and simple solution.
Many assume hackers only target large companies, like Target and Home Depot, but small-to-medium businesses are the targets of 70 percent of all cyberattacks. They are low-hanging fruit for hackers, lacking the sophisticated defenses of larger corporations. An average attack costs a business $7 million, and 60 percent of businesses that are hacked go out of business within six months.
Yet, the cybersecurity industry has focused almost exclusively on large businesses. Jacksonville-based OnDefend primarily tests the defenses of large enterprises of large enterprises, an expensive offering that only works if the company already has a cybersecurity system in place.
In partnership with LBA Accouting, OnDefend set out to create a way for smaller businesses to better secure their networks and data. Their solution, CyberSURE, surveys the companies’ cyber procedures, grades them on a scale from 0 to 900, reports vulnerabilities and makes recommendations to improve security. If a company scores 800 or higher, it receives a certification showing it is safe to do business with, a certification that can lower the cost of cyber insurance.
“This market has been left in the cold,” said Freedman. “We tried to make a plug and play product that almost runs itself.”
He noted that the certification can be a differentiator, especially in the insurance and finance industries, which are most targeted by hackers. Health records are the most sought after prize for hackers, who can use them to file fraudulent claims. A single medical record can go for as much as $360 on the black market, Freedman said.
Retailers, hotels, restaurants and other businesses are still prime targets because of the credit card information they collect. Small businesses that keep their employees’ insurance information are also ideal targets.