Large enterprises are the least prepared of all companies against cyber crime, despite having greater budgets and resources, according to new research.  

Contrary to received wisdom, larger companies performed the worst when assessed by cyber security consultancy firm Coalfire, in part due to their complex organizational structure and large attack surface built from multiple acquisitions.  

Researchers' assumptions that SMBs would be the most at risk due to a lack of firm process and procedure, as well as staffing and budget weaknesses, were defied in Coalfire's first annual Penetration Risk Report, with midsized businesses hitting what the report dubbed a "cyber security sweet spot".