Skip to main content
VendorsRSM US LLP

RSM US LLP

Cybersecurity reports and statistics published by RSM US LLP

8 categories1 reports

Research Reports

Reports and publications from RSM US LLP

Recent Statistics & Reports

A smaller share of Canadian middle market firms indicate they don't have AI governance in place compared to U.S. respondents (5% versus 20%).

4/17/2025
AI governanceCanadaUS

On average, Canadian respondents at middle market organisations have larger cybersecurity teams, with 39% saying they have 16 or more employees, compared to 11% in the U.S..

4/17/2025
StaffPersonnelCanada

51% of middle market organisations stated they outsourced cybersecurity risk and compliance management. Other leading functions outsourced include cyber incident response and forensics (46%), the security operations center (46%), security awareness training (44%), and vulnerability management (44%).

4/17/2025
Outsourced securityCompliance managementCybersecurity risk management

Positive responses regarding familiarity with cyber insurance policy coverages among smaller middle market firms decreased to 51% from 66% last year.

4/17/2025
Cyber insurance Cyber insurance policyMiddle market

Canadian middle market firms are less likely to have cyber insurance coverage than U.S. companies (68% versus 82%).

4/17/2025
Cyber insurance CanadaUS

18% of middle market organisations experienced a data breach in the last year.

4/17/2025
Data breachMiddle market

24% of respondents in larger middle market organisations (with revenue between $50 million to $1 billion) reported a breach.

4/17/2025
Data breachMiddle market

12% of respondents from smaller middle market firms (with revenue between $10 million to less than $50 million) reported a breach.

4/17/2025
Data breachMiddle market

15% of smaller middle market organisations reported at least one ransomware attack or request.

4/17/2025
RansomwareMiddle market

33% of respondents at middle market organisations indicated they have five or fewer data security and privacy employees.

4/17/2025
Data security employeePrivacy employeeStaff

34% of smaller middle market companies noted that AI governance steps are not yet in place.

4/17/2025
AI governanceMiddle market

Among middle market companies that experienced at least one ransomware attack, 31% said existing security measures were unsuccessful.

4/17/2025
RansomwareSecurity measuresMiddle market

Familiarity with policy coverages dropped to 69% from 75% in the 2024 data at middle market organisations.

4/17/2025
Cyber insurance Cyber insurance policyMiddle market

Only 46% of larger and 37% of smaller middle market companies reported collaborating with external partners for coordinated resilience planning.

4/17/2025
ResilienceMiddle market

35% of respondents in larger middle market companies reported at least one ransomware attack or request.

4/17/2025
RansomwareMiddle market

41% of respondents at middle market organisations said their existing security measures were completely successful against ransomware attacks.

4/17/2025
RansomwareSecurity measuresMiddle market

52% of respondents at middle market organisations said they are developing communications plans for crises or disruptions.

4/17/2025
Communication planCrisis planMiddle market

97% of surveyed executives at middle market organisations reported feeling confident in their current security measures.

4/17/2025
SecurityMiddle market

Reported middle market breaches fell significantly after reaching a record-high of 28% in the 2024 survey.

4/17/2025
Data breachMiddle market

Larger middle market companies were twice as likely than smaller middle market companies to suffer a breach in the past year.

4/17/2025
Data breachMiddle market

Showing first 20 results