The Critical Choice: How Your Cloud Provider Impacts Email Security

Google Workspace vs. Microsoft 365: Insurance Data Reveals Cybersecurity Disparity

The Growing Concern of Cyberattacks

The use of cloud-based productivity platforms, such as Google Workspace and Microsoft 365, has become increasingly prevalent in today’s business landscape. However, a new report from insurance firm Coalition highlights a striking disparity in the cybersecurity performance of these two platforms. The report suggests that businesses using Google Workspace are only half as likely to suffer a reportable cyberattack compared to those using Microsoft 365.

Insurance Data Reveals the Risk

According to the data collected by Coalition and insurer At-Bay, companies using Microsoft 365 were found to be more than twice as likely to make a claim against insurance compared to those using Google Workspace. At-Bay specifically found that Microsoft 365 had a relative email claims frequency double that of businesses using Google Workspace.

Adam Tyra, the general manager of security services for At-Bay, explains the impact of these findings on insurance premiums. Microsoft 365 users are faced with higher premiums due to the perceived higher risk associated with the platform. The data suggests that Google Workspace is less risky, leading to significantly lower premiums for its users.

Differing Protection Offerings

Both Google Workspace and Microsoft 365 are popular targets for cyber attackers. In recent years, email campaigns have targeted Microsoft 365 accounts to steal credentials and sensitive information, while researchers discovered vulnerabilities in Google Workspace that allowed for data theft from Google Drive without detection.

The data from Coalition and At-Bay underscores the fact that the relative risk of these two platforms has rarely been measured. The Coalition report theorizes that default protections offered by the platforms may contribute to the disparity in claims frequency. It points out that the base licenses for Microsoft 365 do not include Defender for Office 365, which offers additional email security features already present in Google Workspace’s base offering.

The Importance of Cloud-Based Email Security

While it remains unclear if Google Workspace offers better security features than Microsoft 365, both companies stress the advantages of using cloud-based email platforms. According to At-Bay, it is essential to move away from on-premises systems and adopt cloud-based solutions. Cloud platforms provide more sophisticated features such as machine learning, real-time threat intelligence, and responsiveness to ongoing threats.

Chris Hendricks, head of incident response at Coalition, emphasizes the importance of multifactor authentication and the implementation of email security technologies such as SPF, DKIM, and DMARC. Regular training on identifying and mitigating phishing attacks, good password practices, and avoiding taking finance and IT actions based on suspicious emails are also critical for organizations to bolster their email security.

Conclusion: A Critical Choice

Choosing the right cloud-based email provider is a critical decision for businesses in today’s cybersecurity landscape. The data from insurance firms highlights the disparity in risk between Google Workspace and Microsoft 365, with the former being perceived as less risky. However, it is essential to note that the effectiveness of these platforms may be influenced by various organizational factors.

While Google Workspace and Microsoft 365 continue to invest in security innovations and offer robust security control options, cloud-based email platforms are inherently more secure than on-premises systems. Businesses should carefully evaluate their specific needs, consider the insurance data, and choose a solution that aligns with their security requirements. Implementing additional security measures, such as multifactor authentication and email security technologies, can further enhance protection against cyber threats.

In a rapidly evolving digital landscape where cyberattacks are becoming increasingly sophisticated, organizations must prioritize cybersecurity and make informed choices to safeguard their data, reputation, and bottom line.