Perceptions and Attitudes of Canadian Organizations Toward Cybersecurity

This report presents findings on the perceptions and attitudes of Canadian organizations regarding cybersecurity, based on a survey conducted in July-August 2024 with 500 cybersecurity decision-makers. The report outlines the objectives and methodology of the research, highlighting that a significant majority (98%) of organizations conduct cybersecurity awareness training, with most making it mandatory. The frequency of training sessions is noted, with 67% of organizations conducting training at least quarterly. The report also discusses the importance of data sovereignty over price when selecting cybersecurity service vendors, with 60% of respondents prioritizing data sovereignty. Additionally, it details the allocation of financial resources to IT systems management and cybersecurity, noting that 74% of organizations have increased their financial resources in the past year. The report concludes by examining the oldest technology still in use within organizations, revealing that one-third are using technology released prior to 2010.