No Holidays for Hackers: Higher Revenue Losses for Non-weekday Cyber Events
This article is from RISQ Consulting’s Zywave client portal, a resource available to all RISQ Consulting clients. Please contact your Benefits Consultant or Account Executive for more information or for help setting up your own login.
Ransomware events that occur on holidays and weekends cause much higher revenue losses than cyber incidents occurring on weekdays—primarily due to lower staffing levels—according to a survey of over 1,200 cybersecurity professionals.
Security firm Cybereason found that nearly half (44%) of organizations drop security staffing levels on holidays by as much as 70% andnder a quarter of respondents reduce their security staff by 90% from normal weekday levels. Just 7% of organizations have at least 80% of their security professionals available on holidays and weekends.
The impact is clear: one-third of respondents said they saw a much greater financial toll from weekend and holiday attacks, up from 13% in 2021’s study. The losses were even higher in the transportation and education sectors, where the number of respondents reporting higher revenue losses jumped to 48% and 43%, respectively.
“Ransomware actors tend to strike on holidays and weekends because they know companies’ human defenses often aren’t as robust at those times,” said Lior Div, Cybereason CEO and co-founder. “It allows them to evade detection, do more damage and steal more data as security teams scramble to mobilize a response.”
The study also revealed slower risk assessment times during breaks, with 60% of respondents saying it took them longer to fully understand the scope of the attack. This, in turn, slows down recovery time and adds costs.
Cybercriminals already know holidays and weekends are prime attack times, especially as the strain of relentless cyber events takes its toll on security professionals. In fact, multiple high-profile cyberattacks have occurred on holidays. In 2021, hackers made headlines on Mother’s Day weekend (Colonial Pipeline), Memorial Day weekend (meat supplier JBS Foods) and the Fourth of July (software vendor Kaseya). This year might be even worse, according to a few respondents.
“This November/December is going to be particularly rough, as it’s going to be the first time some people have been able to see their families since the pandemic began. All of that means that people will be further from the office and less likely to check alerts,” said one security analyst in the legal sector.
The survey indicated a few areas where organizations can improve their resilience to off-hours cyber events. More than a third (36%) of organizations said they had no business continuity plan, despite observing other companies’ struggles to bounce back. Of those firms that have already experienced a ransomware event, nearly a quarter (24%) still don’t have a ransomware-specific contingency plan.
Some industries are better prepared than others. Specifically, the IT/telecommunications sector and construction firms were most likely to be prepared, with 84% and 81% of respondents indicating they have plans in place for weekend and holiday events. Manufacturing (67%) and health care (65%) were less prepared, despite these sectors’ potential for high revenue losses or loss of life.
- Published in Blog
HR-to-Employee Metrics
This article is from RISQ Consulting’s Zywave client portal, a resource available to all RISQ Consulting clients. Please contact your Benefits Consultant or Account Executive for more information or for help setting up your own login.
Deciding how many HR professionals an organization needs to operate effectively is a hotly debated topic. Some organizations rely on metrics to guide them in making this decision. One of the most common metrics organizations use when deciding whether to hire HR professionals is the HR-to-employee ratio. When properly analyzed, this ratio can aid employers in meeting their HR needs and benchmarking their organizations against others. It can help employers determine not only how to fill their HR staffing needs, but also analyze how well their HR professionals are delivering on organizational goals.
This article explains the HR-to-employee ratio, how organizations can use it and what employers should consider when deciding whether to hire HR professionals.
What Is the HR-to-Employee Ratio?
The HR-to-employee ratio measures how many HR professionals there are for each employee in an organization. It’s calculated by dividing the total number of full-time HR professionals by the total number of full-time employees in an organization and then multiplying that number by 100. For example, the HR-to-employee ratio for an organization with one full-time HR professional and 73 total full-time employees would be 1.37. As the total number of employees increases, the HR-to-employee ratio usually decreases, though this varies by organization.
The HR-to-employee ratio is a useful measurement for evaluating HR departments. It can guide an organization’s decisions regarding HR staffing, including whether its HR department needs additional support, is overstaffed or can delegate or outsource certain functions. It can also help determine an organization’s HR efficiency, as a higher ratio could indicate a lower efficiency in delivering HR services.
According to Bloomberg’s HR Department Benchmarks and Analysis report, annual survey results revealed the median HR-to-employee ratio is 1.4 full-time HR professionals per 100 employees. This ratio is currently at an all-time high, as it previously peaked in 2013 at 1.3 HR professionals per 100 employees. The recent increase in the HR-to-employee ratio is primarily the result of unprecedented workforce growth and employers’ need to address the increased HR burden on their organizations.
Smaller employers (organizations with fewer than 250 employees) generally have a significantly higher HR-to-employee ratio—averaging between 1.7 and 3.4—because of the minimum number of HR professionals required to perform core HR functions, such as recruiting and benefits administration. It’s not uncommon for smaller organizations in the early stages of growth needing to focus more on people management than more established organizations, resulting in a higher ratio. As organizations grow, the HR-to-employee ratio tends to decrease because of the cost advantages employers gain by increasing the size of their organizations.
Factors Impacting the HR-to-Employee Ratio
Determining how many HR professionals an organization requires is difficult and depends on the organization’s needs and growth strategy. While the HR-to-employee ratio can guide employers as they make HR staffing decisions, there are several factors that may influence this ratio. These factors include the following:
- Technology—Automating HR operations will reduce an organization’s need for HR professionals, lowering the HR-to-employee ratio. Organizations that invest in digital and self-service HR tools can improve overall accuracy and empower managers and employees to self-manage many HR functions, which can allow HR professionals to focus on higher-value work.
- HR involvement—The role of HR can influence the HR-to-employee ratio. For example, a highly operational HR department may require more HR professionals to perform a variety of functions, such as employee training and development, recruiting, onboarding, benefits and compliance.
- Budget—A larger budget allows an organization to staff more HR personnel, while a smaller budget can restrict the total number of employees the organization is able to hire, thus impacting the HR-to-employee ratio. Increasing the size of an HR department will often result in a higher HR-to-employee ratio; however, a high-functioning HR department can ideally help reduce costs elsewhere in an organization.
- Industry—The HR-to-employee ratio generally varies by industry, as some sectors require more HR involvement than others—resulting in a higher ratio. Industries such as consulting, insurance and finance typically have higher ratios than manufacturing, construction, retail and health care because sectors with highly skilled professionals tend to require more training and personal development to engage and retain staff compared to their lower-skilled counterparts.
Other factors that may impact an organization’s HR-to-employee ratio include whether the organization is centralized or decentralized, where employees are located (e.g., a single location versus multiple locations) and the level of employee sophistication. The HR-to-employee ratio only accounts for full-time HR professionals, so there may be a gap between the metric and actual organizational needs.
Does a Smaller Organization Need HR Professionals?
Regardless of an organization’s size, HR practices and processes play a role—whether completed by an owner or a formal HR professional—in the organization’s success. Small and midsized employers tend to implement more formal HR processes as they grow. This is because their compliance needs, cultural challenges and talent struggles become increasingly complex with more employees.
Small and midsized organizations generally have the following HR needs:
- Recruiting job candidates
- Onboarding new hires
- Providing training and development opportunities
- Handling compensation
- Managing benefits
- Setting up and overseeing payroll
- Reviewing timekeeping records
- Ensuring compliance
- Fostering employee relations
- Promoting health and safety
- Boosting organizational morale
Owners and executives of smaller organizations often take on HR responsibilities themselves rather than hiring new employees. According to industry research, owners and executives of smaller organizations can spend as much as 12 hours each week on HR administration. However, as organizations grow, small and midsized employers often need HR support because executives and owners often do not feel confident managing HR functions and processes or may have other areas that require their limited time and resources. Utilizing the HR-to-employee ratio can help theses employers decide when to hire HR staff.
Before deciding to hire an HR professional or adding additional HR staff, employers need to decide where their staffing needs are the greatest and how much value HR professionals could add to their organization versus an investment in other departments. They also need to consider the skills an HR professional brings to ensure organizational needs are met.
Summary
Understanding the HR-to-employee ratio and factors that affect it can help employers evaluate the role of HR in their organizations. When making HR staffing decisions, employers should consider their organizations’ specific needs and long-term goals. Using the HR-to-employee ratio can provide employers with insights regarding HR hiring practices and improving organizational efficiencies.
For more HR-related resources, contact RISQ Consulting today.
- Published in Blog