Outsourcing remains a minority strategy overall, but it is evolving. Across all respondents, 16% of US and 19% of Canadian SMBs outsource some or all cybersecurity functions. Among US firms that outsource, 35% now use a cyber insurer offering MDR, 21% use a standalone MDR vendor, 17% rely on an MSP/MSSP with MDR and 27% still use a traditional MSP. In Canada, 27% of outsourcing SMBs use a cyber insurer with MDR, 8% use an MDR vendor, 27% work with an MSP/MSSP with MDR and 38% rely on a traditional MSP.
