Cyber attacks trigger greater security investment than regulatory compliance among Indian organisations

About 64% of Indian organisations bought cybersecurity after a security incident, vs 49% in Australia and 48% in MEA

Cybersecurity incidents prove to be a greater security investment trigger for Indian organisations rather than regulatory requirements like DPDP, as per a recent survey on Indian organisations by Synology.

About 64 per cent of Indian organisations made a new purchase towards cybersecurity following a security incident, higher than the 49 per cent companies flagged in Australia and 48 per cent in MEA. However, only 29 per cent of Indian organisations cited regulatory requirements as a trigger for new data protection purchases.

The data comes in months before the deadline for India’s Digital Personal Data Protection (DPDP) Act in May 2027, with penalty fines staggering up to ₹250 crore.

“These findings suggest that many organisations may still be treating data protection as a response to incidents rather than as part of compliance and readiness planning,” Synology said in its report.

While 99% expressed confidence in their organisation’s resilience to disruption, organisations struggle to integrate multiple tools across their backup, disaster recovery, ransomware protection, and security.

Backup frequency also presents a gap, as only 43 per cent of organisations use real-time or continuous data protection, while the remaining 57 per cent rely on daily, weekly, or monthly backups. Having backup solutions in place does not automatically mean organisations can minimise data loss when disruption occurs, as the time between backups represents potential data loss.

Data protection investment is expected to grow by approximately 14-15 per cent over the next two years, with 69 per cent of organisations expecting increases of 10 per cent or more. While 31 per cent organisations are focusing on AI-driven automation, only 12 per cent prioritise backup modernisation.

“As security attacks increasingly target backups, cyber resilience can no longer be treated as an add-on layer assembled after deployment. Organisations should seek an integrated platform that unifies hardware, software, and backup management, while maximising storage efficiency, with built-in advanced protection and one-click security updates,” said Jia-Yu Liu, Executive Vice President, Data Protection Group, Synology. The company offers an operating system among ActiveProtect appliances that helps preserve recovery copies when production systems are compromised.

Leave a Reply

Your email address will not be published. Required fields are marked *