OREANDA-NEWS  Russian companies plan to increase spending on information security by an average of 14% by 2025, according to a study by Kaspersky Lab.

In particular, small and medium-sized businesses plan to increase cybersecurity costs by 12%, large businesses - by 16%.

By the end of 2022, the amount of cybersecurity spending in Russian companies averaged $3.7 million, which corresponds to about 19% of the total IT budget.

In small and medium-sized companies, the cybersecurity budget was estimated at $38 thousand, while the total IT budget was $75 thousand. In large companies, the figures amounted to $375 thousand and $1.5 million, respectively.

At the same time, spending on cybersecurity in the IT and telecom sectors last year amounted to $7.4 million, or 24% of the total IT budget. In the industrial sector, an average of $1.3 million, or 16% of the IT budget, was allocated for cybersecurity. The retail sector has the smallest budget for cybersecurity - $22.3 thousand (18% of the IT budget), despite the fact that by 2025 the indicator is planned to increase by 8%.

Among the reasons for the increase in cybersecurity costs, the surveyed companies cited the need to improve the qualifications of specialized employees, risks associated with geopolitics, as well as the increased complexity of the IT infrastructure.

More than 30% of Russian respondents consider improper use of IT resources by employees, violation of IT security policies by employees, as well as DDoS attacks as the main threats.

Among the main threats faced by Russian respondents over the past year are improper use of IT resources by employees (39%), violation of IT security policies by employees (38%), as well as DDoS attacks (31%).

At the same time, the global average budget for information security in 2022 amounted to $11.8 million (30% of the total IT budget); it is expected that by 2025 the figure will grow by 15%.