Enterprise AIProblem 0009
The tooling that would protect a small firm assumes somebody to run it: a console to watch, alerts to triage, a policy to maintain. A twelve-person company has none of those, and a serious incident can threaten the business itself. What is missing is not awareness (owners know) but anything that works without an operator.
Who lives with itOwner-managed firms and their one technical person · the larger customers whose supply chain runs through them · insurers pricing cyber cover
Why nowAn ENISA survey of small and medium enterprises, carried out during the pandemic, found that around nine in ten expected serious harm to their business within a week of a cyber incident and that over half believed it would likely end the business, against a backdrop of low security budgets and a lack of in-house cyber skills.
Why it matters · the JudgeAn existential risk to the firms that make up the overwhelming majority of businesses, where the binding constraint is operator time rather than money or intent. Security that needs nobody to watch it is a different product from the one being sold.
Inspired by reporting from ENISA (European Union Agency for Cybersecurity)