Only 39 pc of Indian companies ready for ransomware attacks: Sophos

As cyber threats grow more sophisticated, businesses face mounting challenges in securing their digital infrastructure. In India, only 39 pc of companies are prepared to withstand prolonged ransomware attacks, says a report by Sophos, a cybersecurity firm.

India’s digital landscape is growing rapidly, but so are the threats that come with it. As cyberattacks become more sophisticated, businesses face mounting challenges in securing their digital infrastructure. A recent report by Sophos, a cybersecurity firm, reveals alarming gaps in India’s preparedness, only 39 pc of Indian companies are equipped to withstand a prolonged ransomware event, highlighting the urgent need for stronger defences.

In a press statement, Sophos says that Indian companies are most concerned about AI-augmented attacks and credential theft, stressing the need for stronger security strategies.

It adds that while 70 pc of companies have implemented cloud security and 56 pc are investing in AI-driven measures, only 49 pc have established security maturity frameworks and 44 pc meet security standards.

According to the report, gaps in cybersecurity readiness are contributing to difficulties in handling prolonged ransomware and cyberattacks.

It adds that to tackle skills shortages, 45 pc of businesses plan to outsource cybersecurity services, yet 44 pc are hesitant to work with managed service partners that have experienced breaches. In contrast, 49 pc aim to upskill their teams through partner-supported training.

Sophos says that only 5 pc of Indian organisations rely on a single security vendor, while 71 pc use three or more to meet their cybersecurity needs. Multi-vendor environments are expected to grow as businesses seek flexible, tailored solutions.

It adds that in response to rising threats, Indian businesses are adopting globally recognised frameworks like NIST and CCM to strengthen defences. Meanwhile, 98 pc are enforcing stricter performance standards and SLAs, especially with partners who have experienced breaches.

The statement adds that the report analysed data from 900 companies across Australia, India, Japan, Malaysia, Philippines and Singapore to identify business priorities for the next 12 months and opportunities for managed security partners.

“We can see India’s AI mission taking shape as enterprises are taking it seriously, both as a powerful ally and a potential threat. The fact that organisations are significantly boosting their cybersecurity budgets is a great sign that the country is committed to protecting its digital infrastructure. The growing investment in key areas such as threat detection, incident recovery and data protection not only reflects the proactive stance of Indian businesses but also highlights their readiness to tackle the complex challenges posed by AI-driven cyber risks,” says Sunil Sharma, Vice President of Sales (India and SAARC), Sophos.

“The increasing investments in cybersecurity and the preference towards multiple expert vendors presents a significant opportunity for MSPs to help enterprises improve their customers’ defences with a customised approach,” Sharma adds.