A study by the National Cybersecurity Institute (INCIBE) reveals that 60% of Spanish SMEs lack a security incident response plan. The research, carried out on a sample of 1,500 companies, also notes that only 25% make periodic offline backups, and fewer than 15% have endpoint detection and response solutions (EDR).
The report highlights that the lack of preparation has direct consequences: SMEs without a response plan take an average of 21 days to recover from a ransomware attack, compared with 3 days for those that have one. INCIBE recommends at minimum having a one-page document with the steps to follow, the key contacts and the location of the backups.
