Over half of North American small and medium-sized businesses lack basic email security, exposing them to phishing and fraud. Many run outdated software, with common vulnerabilities in file-sharing and remote access systems. These weaknesses fuel ransomware and email compromise attacks, yet cyber insurance uptake remains below 10%. Improved cyber risk intelligence and proactive insurer involvement could enhance protection and resilience for smaller firms.
