2020 CrowdStrike APJ State of Cybersecurity Report

Approach and methodology

Sample and data collection
Online survey

The CrowdStrike APJ survey was conducted between May 26 and June 7, 2020.

The total sample size is 2,017, which gives a confidence level of ± 2.1% at the 95% confidence level.

Research participants came from a permission-based, online panel.

All participants work in organizations of 100 or more staff (except in New Zealand where 50 to 99 staff were included) and are in managerial positions: C-Suite/executive leadership, senior management and middle management.

SECURITY IN RESPONSE TO COVID-19

A majority of business leaders say they have changed their security programs as a result of COVID-19

COVID-19 has caused over half (54%) of organizations to change their security programs. Yet, findings also show that almost four-in-ten (39%) have not changed their programs.

There are notable regional disparities in whether organizations changed their programs

While over 70% of organizations in India and Indonesia changed their security programs, over 50% of organizations in Australia and New Zealand did not.

Over a quarter of respondents say their organizations don’t have a cybersecurity emergency response plan or aren’t aware if one exists

An alarming 14% do not have a cybersecurity emergency response plan. A further 12% or around one-in-ten organizations don’t know if they have a cybersecurity emergency response plan.

Only around three-quarters (74%) have a plan or know there is a plan.

All research participants are managers in larger organizations who should reasonably be expected to know about any cybersecurity plan.

COVID-19 has changed the cybersecurity response plan for most organizations

Those organizations that have a plan were asked whether COVID-19 has changed their cybersecurity emergency response. Almost seven in ten changed their cybersecurity response plan as a result of
COVID-19.

Many respondents received additional security training as a result of COVID-19

Yet, almost four in ten (38%) have not received additional training in security.

Download the report to find out more.