10/20/2026
Small businesses aren't ignoring security because they don't care. They're ignoring it because nobody owns it.
5.7% have mandatory employee security training. 17.8% patch their systems monthly. 6.3% have a plan for what happens when something goes wrong.
Large companies aren't smarter. They just have someone whose job it is.
That's the job we do, so you can keep doing yours.
rjpsystems.com
(This is Canadian data and it's the cleanest national dataset anyone publishes on this. The US pattern is no better. A 2026 survey from the National Cybersecurity Alliance and CISA found that among US small businesses that haven't been breached yet, 30% have no incident response plan at all.)
Source: https://lnkd.in/gD5ySXXA