The ESET Security report was presented, which this year compiled the opinion of more than 4500 executives, technicians and managers of more than 2500 companies from different countries in Latin America, who would consider what their main concerns are, what incidents They suffered and what controls they implemented.
The report consists of four units detailing the types of threats that are most concerned, the most common infection vectors suffered by companies, what types of controls and security solutions are the most implemented and an analysis On the status of information security in the region.
Some of the conclusions left by the 2018 edition of this report is that the main concern for companies is ransomware; A malicious code whose most common form of operation is kidnapping information from the victim and then asking for a ransom. It stands out after that in 2017 the outbreak of Wannacryptor at the global level made this type of threat more popular.
In terms of incidents, the last year at least three out of five companies in the region suffered at least one security incident, with malicious code infection being in the top (45%). Half of them are related to ransomware, so at least one in five companies surveyed throughout Latin America were victims of information hijacking. In the following graph you can see that there is no big difference between the companies surveyed in each country, with Ecuador having a higher rate of ransomware infections and El Salvador that has the lowest:
On the other hand, the analysis of the data shows small differences in the incidence of infections with malicious code in the companies according to their size. This type of threat affects the companies in a very similar way and although in the larger the percentage rises, the reason would be their ability to recognize an incident of this type, leaving room to make their correction.
“The ESET Security Report 2018 allows us to understand broadly what the state of information security is in Latin American companies and to know what actions are being carried out to protect their infrastructure and assets.”, Camilo Gutiérrez mentioned, Head of Laboratory of ESET Latin America. “There are tools to prevent threats, which include security solutions, awareness-raising activities and employee education. The key is to analyze security management as a process, ranging from employees of all levels and hierarchies, to the implementation of technology and management processes, “Gutierrez concluded.