Employee Security Training Is Also A Concern

Sixty-two percent of survey respondents said their companies offer interactive IT security training at least once every six months, but that falls to just 48 percent among small businesses.
Yet, 11 percent said their companies don't offer training.

That, too provides an opening for managed service providers, according to Martorano.

"Providing cybersecurity training is a fantastic opportunity for partners to deliver an additional value-add to their customers," he said in a statement. "MSPs should consider partnering with one of the leading phishing services companies to offer interactive security trainings as a service to their customers."