5 Ways Organizations Fall Short Addressing Cybersecurity Threats

Jolene Rankin • January 25, 2023
Connect with us

According to a recent survey, less than one-third of CEOs (31.8%) said their company is well-prepared for any cybersecurity threat they might face in the foreseeable future, while 58.1% said they are adequately prepared but could be doing more.

 

Common shortcomings typically occur in a number of different areas.

 

1. Lack of a Comprehensive Plan

Organizations may not have a comprehensive plan in place for addressing cybersecurity risks. This can leave them vulnerable to attacks and may make it more difficult to respond effectively to a breach. And while developing a plan is an essential first step, companies need to socialize that plan and make sure everyone knows exactly what they need to do to execute that plan in the event an actual threat is identified.

 

2. Insufficient End User Protection

No matter how many systems and safeguard your corporate IT people put in place, end users are typically the weakest link in a company’s security. That’s because employees may not be aware of the importance of cybersecurity or may not know how to identify and report potential risks. This can increase the likelihood of a breach occurring. One way to address this is through security awareness training. This can be extremely helpful in helping shore up the front line of your cybersecurity defense.

 

3. Inadequate Resources

Many organizations do not have the resources necessary to effectively address cybersecurity risks. In fact, many small businesses do not have a full-time cybersecurity expert on staff. And trying to keep up-to-date on the changing threat landscape can be overwhelming. This is often a result of a lack of budget due to top executives failing to prioritize cybersecurity.

 

4. Outdated Security Systems and Software

Cybersecurity is not something that you put in place once and just forget about it. It requires constant monitoring and updates to stay one step ahead of potential threats. Using outdated security systems and software can leave an organization vulnerable. It is important to regularly update these systems and software to ensure that they are able to effectively protect against new threats.

 

5. Failure to Regularly Test and Review Security Measures

Regularly testing and reviewing security measures helps companies proactively identify weaknesses and vulnerabilities that may not be immediately obvious. Failing to do so can leave an organization at risk. The result is that many organizations end up being reactive and only noticing potential issues once an incident has occurred.

 

Addressing these shortcomings will ensure that your organization is prepared to protect itself from threats and quickly respond to any that may occur.

Online Cybersecurity Assessment

Can your organization withstand a cyberthreat? Take our free cybersecurity assessment to assess your organization's security posture and vulnerabilities.

Start Here
By Shawn Akins October 20, 2025
October 20, 2025 — Early today, Amazon Web Services experienced a major incident centered in its US‑EAST‑1 (N. Virginia) region. AWS reports the event began around 12:11 a.m. PT and tied back to DNS resolution affecting DynamoDB , with mitigation within a couple of hours and recovery continuing thereafter. As the outage rippled, popular services like Snapchat, Venmo, Ring, Roblox, Fortnite , and even some Amazon properties saw disruptions before recovering. If your apps or data are anchored to a single cloud, a morning like this can turn into a help‑desk fire drill. A multi‑cloud or cloud‑smart approach helps you ride through these moments with minimal end‑user impact. What happened (and why it matters) Single‑region fragility: US‑EAST‑1 is massive—and when it sneezes, the internet catches a cold. Incidents here have a history of wide blast radius. Shared dependencies: DNS issues to core services (like DynamoDB endpoints) can cascade across workloads that never directly “touch” that service. Multi‑cloud: practical resilience, not buzzwords For mid‑sized orgs, schools, and local government, multi‑cloud doesn’t have to mean “every app in every cloud.” It means thoughtful redundancy where it counts : Multi‑region or multi‑provider failover for critical apps Run active/standby across AWS and Azure (or another provider), or at least across two AWS regions with automated failover. Start with citizen‑facing portals, SIS/LMS access, emergency comms, and payment gateways. Portable platforms Use Kubernetes and containers, keep state externalized, and standardize infra with Terraform/Ansible so you can redeploy fast when a region (or a provider) wobbles. (Today’s DNS hiccup is exactly the kind of scenario this protects against.) Resilient data layers Replicate data asynchronously across clouds/regions; choose databases with cross‑region failover and test RPO/RTO quarterly. If you rely on a managed database tied to one region, design an escape hatch. Traffic and identity that float Use global traffic managers/DNS to shift users automatically; keep identity (MFA/SSO) highly available and not hard‑wired to a single provider’s control plane. Run the playbook Document health checks, automated cutover, and comms templates. Then practice —tabletops and live failovers. Many services today recovered within hours, but only teams with rehearsed playbooks avoided user‑visible downtime. The bottom line Cloud concentration risk is real. Outages will happen—what matters is whether your constituents, students, and staff feel it. A pragmatic multi‑cloud stance limits the blast radius and keeps your mission‑critical services online when one provider has a bad day. Need a resilience check? Akins IT can help you prioritize which systems should be multi‑cloud, design the right level of redundancy, and validate your failover plan—without overspending. Let’s start with a quick, 30‑minute review of your most critical services and RPO/RTO targets. (No slideware, just actionable next steps.)
By Shawn Akins October 13, 2025
How a Zero-Day in GoAnywhere MFT Sparked a Ransomware Wave—and What Mid-Sized IT Leaders Must Do Now
By Shawn Akins October 13, 2025
The clock is ticking: Learn your options for Windows 11 migration, Extended Security Updates, and cost‑smart strategies before support ends.
More Posts