CDW Canada, a leading provider of technology solutions and services, has released its annual report, Canadian Cybersecurity Trends: Bridging Strategy, Technology, Artificial Intelligence and Human Expertise. Developed in collaboration with IDC Canada, the study surveyed over 704 IT security, risk, and compliance professionals to explore the changing cybersecurity landscape in Canada.

Findings from the report reveal a paradoxical trend: although cyberattacks are decreasing in volume, their effectiveness and impact have increased. In the past year, 87% of Canadian organizations experienced at least one security incident. Average downtime per incident has increased by 10% year-over-year, now reaching an average of 14 days—disrupting critical operations and emphasizing the urgent need for proactive cybersecurity measures.

Generative AI Adoption Slows Amid Security and Governance Concerns

Organizations across Canada have shown strong interest in Generative AI (GenAI), conducting an average of 17 proof-of-concepts (PoCs) between 2023 and 2024. However, only 28% of these initiatives moved into full production due to significant hurdles in security, compliance, and data privacy.

Key barriers to GenAI adoption include:

  • Data privacy concerns (64%)
  • Skills shortages (57%)
  • System integration complexities (44%)

This hesitation presents a unique opportunity for organizations to reevaluate and strengthen their data governance frameworks before scaling GenAI efforts. As CDW Canada’s Field CTO, Cybersecurity, Ivo Wiens noted, “Rushing into full-scale adoption without a strong security framework is a risk no organization can afford. This slowdown is a chance for foundational improvements.”

Cloud Environments Require Proactive Testing

Public cloud infrastructure has become a prime target for cyberattacks. 61% of Canadian organizations reported their public cloud environments were the most impacted. However, those that perform annual security testing reported fewer incidents—23 infiltrations and 33 breaches on average—compared to 25 and 29 incidents respectively for those without testing protocols.

This underscores the importance of proactive security testing as a means of reducing risk exposure, ensuring cloud security, and preserving operational efficiency.

MDR Services Address Internal Gaps and Improve Resilience

To address internal resource constraints and enhance threat detection, many organizations are shifting toward Managed Detection and Response (MDR) services. These services offer real-time monitoring, advanced threat detection, and rapid response capabilities.

Currently, 41% of Canadian organizations have implemented MDR, with another 37% planning to adopt the solution in the near future. MDR enables businesses to reduce vulnerabilities, strengthen resilience, and redirect focus to core operations instead of constant threat mitigation.

“Organizations without the in-house expertise to respond effectively to threats are especially vulnerable,” said Ben A. Boi-Doku, Chief Strategist, Cybersecurity Services Strategy & Development at CDW Canada. “Investing in MDR is essential for 24/7 protection and long-term security success.”

To explore the full findings and learn more about CDW Canada’s cybersecurity offerings, visit the Cybersecurity Solutions page.