News • 13.12.2021

New research reveals cybersecurity confidence gap

95 % of stakeholders satisfied with security, yet one third of companies experienced a data breach

A padlock in front of a laptop
Source: flyd2069 / Unsplash

Despite high confidence in their risk assessment capabilities, study finds a third of companies have been breached, and 89% have been hit multiple times.

New data released by Cornell University’s Center for Hospitality Research and FreedomPay reveals that while nearly all (96%) surveyed retail, restaurant and hospitality stakeholders are confident in their companies’ internal risk assessment processes, their satisfaction (95%) in the security of their systems is misaligned with reality, as one-third of companies (31%) have experienced a data breach in their company’s history. Of companies that have been breached, 89% have been hit more than once in a year, and 69% of retail businesses have been breached upwards of three times in a year.

Check Please! How Restaurant, Retail and Hospitality Businesses are Managing Cybersecurity Risks – a joint study between Cornell and FreedomPay – is based on a new survey of small, medium, and large-size enterprises across the hospitality, retail, and food and beverage sectors.

“Especially over the past two years, cybersecurity has been top of mind for businesses as we navigate a highly complex eCommerce network,” said Chris Kronenthal, President of FreedomPay. “Retailers and hospitality businesses increasingly view their payments systems as more than transaction processing – they are important sources of data and customer insights. Merchants and consumers alike need the assurance that this data is being protected and managed properly.”

“These findings provide a baseline understanding of how key decision-makers are handling cybersecurity issues and offer key insights for optimizing and fortifying systems as we continue down this path of accelerated digital transformation,” said Professor Linda Canina, the Dr. Michael Dang Director of the Center for Hospitality Research at the Cornell Peter and Stephanie Nolan School of Hotel Administration.

Threats are rising, complexity abounds

With new cyber threats emerging daily both internally and externally, business leaders are juggling a full slate of concerns and challenges. Threats such as payment integrity (59%) and malware (58%) are the most cited concerns, with risk management (57%) cited as the biggest challenge leaders say their systems face. Companies also fear internal threats, with hospitality companies most frequently citing human error (86%) and lack of employee education (81%) as negatively impacting cybersecurity systems.

Businesses’ best efforts to protect themselves and customers are spurring growing complexity and system proliferation. The findings revealed three-quarters (74%) of companies use more than one cybersecurity system. Medium merchants (80%) are significantly more likely than small merchants (67%) to use more than one system. More than half of companies (56%) have many cybersecurity systems in many locations. Overall, companies are split on whether systems are governed by a single department (51%) or multiple (49%). Small merchants (57%) are significantly more likely to keep governance to one department, while large merchants (63%) are significantly more likely to have multiple departments involved.

Roadblocks remain

Businesses are challenged to balance security with customer preferences, with many implementing heightened cybersecurity measures to make their customers feel more secured and reassured when making a purchase. The study found that 91% of companies believe their customers deeply care about cybersecurity while 86% believe it increases customer loyalty. Yet, companies acknowledge the inherent tradeoffs – namely, two-thirds (65%) of leaders believe that customers are annoyed by extra security measures, and they want systems to be easy to use (67%).

Budgetary concerns may also play a factor in determining any potential system enhancements – among the few (15%) that currently do not have plans to enhance their system, they are most likely to cite preventative costs (61%) and an unwillingness to have a disruption in service (52%).

Despite these roadblocks, companies have said they are increasing or have increased their IT budgets, calling out the COVID-19 pandemic and technology as driving forces. Other notable findings include:

  • In the dark: More than one-third (35%) of surveyed leaders do not know how much of their company’s budget is spent on cybersecurity.
  • Bicameral opinion: While 91% of respondents agree that their customers do care about cybersecurity, 48% also believe their customers do not care about cybersecurity.
  • Inaction: Nearly all (96%) companies say they value the importance of security systems to protect their data, and 85% agree that their customers would be more satisfied if they had extra security measures in place. Yet, half (50%) have either not increased their IT security budget or decreased their budget since 2019.
  • Show me the money: Still, companies are divided on what precautions and guidance are worth the cost. Four-fifths (83%) of companies who do use a third-party to manage and secure information say this option is “more cost-effective” for their business, while half (51%) of companies who do not use a third-party supplier cite it as being “more costly” than their current process.
  • Checking the box? Almost all merchants (91%) are very or extremely confident that their company adequately trains end-users, relying on conferences and seminars (71%) to keep them trained and engaged. Notably, small (92%) and medium (95%) merchants are significantly more confident than their large (79%) counterparts, where the most common form of end-user engagement comes from training videos (82%).
  • Looking for a leader: A majority of companies (87%) say they would welcome involvement from the U.S. government to fight cybersecurity threats as well as enhance policy (84%). Large merchants (threats-76%, policy-74%) and retail companies (threats-81%, policy-75%) are significantly less likely to want the U.S. government involved.

The full report can be downloaded here.

Source: FreedomPay

related articles:

popular articles:

Thumbnail-Photo: Social Commerce: Community sells?
04.10.2023   #online trading #sustainability

Social Commerce: Community sells?

Why the community approach is replacing fast delivery among customer demands and what that means for you.

For a long time it was said that fast or even "same day delivery is the key". For Fabian Mischler, this is no longer the only key to satisfied customers. In an interview, the CEO of the social commerce platform ooblee told us why community ...

Thumbnail-Photo: For you: Retail marketing calendar 2024
08.01.2024   #marketing #sales promotion

For you: Retail marketing calendar 2024

You can use these phases and days for yourself and your business in the upcoming year

Birthdays, holidays, holidays ... We record all these days in calendars every year to plan our personal daily lives. But the financial year can also be planned. This can be particularly important for retailers. You can plan ...

Thumbnail-Photo: Christmas decorations: set the scene for your store!...
09.11.2023   #customer experience #shop decoration

Christmas decorations: set the scene for your store!

From the floor to the shelves and lights to the shop window - here's how to get your store ready for Christmas!

The weeks leading up to Christmas Eve are considered to be the busiest of the year....

Thumbnail-Photo: Veganuary 2024: Best sales strategies to reach the ‘no meat’...
11.01.2024   #brick and mortar retail #food retail

Veganuary 2024: Best sales strategies to reach the ‘no meat’

Why retailers should take advantage of the trend

Veganuary has begun its fourth year in Germany. Over 850 German companies are taking part in this global movement for a plant-based ...

Thumbnail-Photo: ISE 2024 - the future of retail
23.10.2023   #online trading #Tech in Retail

ISE 2024 - the future of retail

ISE will take place in Barcelona from 30 January to 2 February 2024

Since it began in 2004, Integrated Systems Europe (ISE) - the world's premier exhibition for professional audio visual (pro AV) and systems integration - has grown in size, strength and influence to become an industry-defining event. Every year, ...

Thumbnail-Photo: Tips: Optimal shopping experience for  Christmas...
22.11.2023   #online trading #artificial intelligence

Tips: Optimal shopping experience for Christmas

How to prepare for the shopping days as an Amazon retailer

The promotional days at the start of the Christmas...

Thumbnail-Photo: The quiet hour – A contribution to inclusion in retail?...
31.10.2023   #customer satisfaction #customer experience

The "quiet hour" – A contribution to inclusion in retail?

Finding calm in a busy world: supermarkets make their mark

The world of commerce is constantly looking for new ways to attract and retain customers...

Thumbnail-Photo: Valentines Day marketing: creative campaigns to make your heart sing...
18.01.2024   #brick and mortar retail #sustainability

Valentine's Day marketing: creative campaigns to make your heart sing

Examples of how you can score points on Valentine's Day

Zalando killed two birds with one stone in 2021: with the invitation to "campaign exchange the clothes after your ex", customers were shown ...

Thumbnail-Photo: Black Friday and Cyber Monday: Minimize mistakes, maximize success...
11.10.2023   #e-commerce #customer satisfaction

Black Friday and Cyber Monday: Minimize mistakes, maximize success

Mistakes you can avoid on promotion days like Black Friday and Cyber Monday

The promotion days on November 24 and 27 raise the sales hopes of many retailers. Despite the huge potential, these events can also be a challenge. Competition is fierce, customers are critical and expect exceptional deals. Mistakes in preparation ...

Thumbnail-Photo: Turning customers into friends - heres how it works...
24.01.2024   #marketing #online marketing

Turning customers into friends - here's how it works

WhatsApp channels as a secret weapon in the marketing mix

In fall 2023, Meta launched WhatsApp channels, a completely new feature in 150 countries ...