Business leaders seldom think much about their physical security systems. As long as the system is working, it doesn’t get much consideration.

However, legacy systems create significant risk, not just to physical security but to the IT infrastructure.

Data protection is a foundational IT practice for every organization. Data loss can hamper productivity or even bring operations to a halt. A security breach can expose sensitive and strategic information, resulting in a damaged reputation, customer churn, and potential fines and legal challenges.

Firewall. Check.

Backups. Check.

Cyber insurance. Check.

We’re protected against ransomware. Not so fast.

Most organizations recognize that ransomware remains a serious threat. However, too many organizations think they’re protected when they have basic security measures in place.

Endpoint devices represent the primary entry point for attackers to compromise company networks. In fact, up to 90 percent of all successful cyberattacks originate at an endpoint device. About 68 percent of organizations have experienced at least one endpoint attack that compromised their data or IT infrastructure.

Organizations aren’t spending enough on cybersecurity. As we explained in our previous post, many business leaders have misconceptions about the risks to their organizations and the level of security needed to protect against the latest attacks. They may view security as a “nice to have,” whereas new technologies such as AI are seen as strategic investments that will drive the business forward.

Cybersecurity budgets increased by about 4 percent in 2025 — half the 8 percent budget growth in 2024. Cyber threats continue to escalate, but organizations aren’t dedicating enough of their IT budgets to addressing that risk.

Meanwhile, AI is taking more and more of the IT budget pie.

It’s troubling to think about physical security risks in the workplace. However, a recent study found that workplace crime is rising due to increased aggression, growing numbers of weapons, and economic and social factors. A separate study found that the high cost of living is driving more workplace theft.

AI has caused numerous unexpected issues, ranging from bias and discrimination in critical decision-making systems to misinformation and security threats. These problems often stem from the technology’s complexity and reliance on human-biased data.

However, one challenge is all too predictable: shadow AI. Employees are using an array of AI tools that aren’t sanctioned, monitored or managed by the IT department.

Is your organization taking full advantage of Microsoft 365’s security features?

A recent benchmark study of more than 1.6 million M365 users found shocking security gaps. Even fundamental security measures are not fully implemented in many organizations.

K-12 schools and libraries have a new weapon in the war against cyberattacks — funding through a Federal Communications Commission (FCC) pilot program.

On June 6, 2024, the FCC approved the Schools and Libraries Cybersecurity Pilot Program, earmarking $200 million for security solutions and services over the three-year pilot.