Understanding of cyber risks in organizations in Canada by type 2021| ��ƽ��

Level of understanding of cyber and privacy risks within organizations in Canada as of October 2021, by type

Characteristic	High: understanding from formal, enterprise-wide assessment	Moderate: limited understanding from ad hoc assessments	Low: anecdotal understanding, no assessments	No understanding
Cloud risks	44%	40%	14%	2%
Data breaches	41%	38%	18%	3%
Privacy violations	37%	40%	19%	4%
Software supply chain risks	31%	45%	23%	2%
IoT/technology vendors	30%	43%	25%	2%
Nth party risks	28%	41%	27%	4%

Download

Source

Show detailed source information?

Already a member?

Source

Release date

November 2021

More information

Region

Canada

Survey time period

October 2021

Number of respondents

114 respondents

Special properties

risks arising from third parties or suppliers

Supplementary notes

The original question was formed as follows: "What is the level of understanding within your organization of the cyber and privacy risks arising from your third parties or suppliers across the following areas?"

Respondents operate in a range of industries: tech, media and telecom; industrial manufacturing; financial services; retail and consumer markets; energy, utilities and resources; health; and government and public services.

Citation formats

An October 2021 survey of Canadian tech and security executives found that in around 40 percent of organizations, there was a high level of understanding of cloud risks that arise from third parties or suppliers. Around 40 percent of the surveyed organizations had a moderate or high understanding of risks related to cloud environments. A further 27 percent of respondents said there was a limited understanding of privacy violations that could arise from the Internet of Things and technology vendors.