Despite Increased Investment, SMEs Face Growing Security Concerns

By Greg Tavarez

Small and medium-sized businesses (SMEs) are the backbone of the economy, but they are also simultaneously prime targets for cyberattacks. And despite increased investments in security, many IT professionals at SMEs are more worried about security than ever before.

Security Concerns on the Rise

A new report by JumpCloud found that 50% of respondents are more concerned about security than they were six months ago. Nearly half of respondents' organizations fell victim to a cybersecurity attack in the first half of 2024, and 71% of respondents believe any security-related budget cuts would increase their risk.

IT Sprawl and Lack of Resources Hinder Security

The report highlights several factors that make it difficult for SMEs to secure their IT environments, but two of the standout factors are IT sprawl and lack of resources.

Just about half of SMEs require between five and 10 tools to manage the worker lifecycle, even though 84% would prefer to do so with only one. This sprawl makes it harder to track everything in the environment and increases the risk of security breaches.

At the same time, half of IT professionals say they lack the resources and staffing to secure the organization against cybersecurity threats.

Emerging Technologies Pose New Threats

Additionally, the report found that emerging technologies (such as AI) have contributed to the rise in security risks; 61% of IT professionals agree that AI is outpacing their organization's ability to protect against threats. Furthermore, 84% of SMEs are concerned about shadow IT. Shadow IT is the use of unauthorized applications and services, and it was the cause of 37% of the breaches SMEs have experienced so far this year.

“To help combat the security holes shadow IT creates, IT needs to deploy tools to help spot rogue apps,” said Greg Keller, co-founder and Chief Technology Officer, JumpCloud. “This will give IT teams the control and visibility they need to keep organizations safe.”

That leads to our next point: MSPs are a critical tool for many SMEs, and the reports backs that statement. In fact, 76% of SMEs rely on an MSP for at least some functions, and 67% of SMEs plan to increase their investment in MSPs over the next year.

However, some SMEs are looking for more from their MSPs. SMEs who don't use MSPs say it's because they prefer to handle IT themselves. Why? Well, cost was the most common reason why SMEs cut ties with their MSPs. That is why the report suggests that MSPs should focus on security, cost, scale and customer experience to be successful in the SME market.

“IT teams are dealing with many obstacles,” said Keller. “They face uncertainty about economic conditions and elections.”

To summarize, JumpCloud's report provides valuable insights; by understanding these trends, IT teams can make informed decisions about how to best secure their organizations.




Edited by Alex Passett
Get stories like this delivered straight to your inbox. [Free eNews Subscription]

MSPToday Editor

SHARE THIS ARTICLE
Related Articles

AI for Security Infrastructure: Rebalancing Cybersecurity for the Decade Ahead

By: Special Guest    7/27/2026

AI-powered cybersecurity infrastructure can help security architects detect configuration drift, optimize existing controls, reduce exposure, and shif…

Read More

Why DNS Security and Threat Detection Need to Work Together

By: Erik Linask    7/21/2026

DNSFilter and Blumira have launched a native integration that combines predictive DNS threat blocking with continuous security monitoring to help orga…

Read More

From Generic VSaaS to Vertical Expertise: A Growth Strategy for MSPs

By: Erik Linask    7/15/2026

MSPs can build tailored VSaaS offerings for healthcare, education, logistics, and other industries by combining flexible VMS platforms with vertical-s…

Read More

Why AI Spend Management Could Become the Next MSP Service Opportunity

By: Erik Linask    7/14/2026

As AI costs rise, businesses need visibility into token usage and budget risk, which creates a potential new AI cost-governance revenue opportunity fo…

Read More

The Next SOC Shift Is Here: Autonomous Identity Response for MSPs

By: Erik Linask    7/8/2026

Blackpoint Cyber's new AI SOC Agent for Identity Threat Detection and Response gives MSPs an autonomous, human-guided way to contain high-confidence c…

Read More