08
NEWS
Cyberattack breaches on finance houses triple in five years
C
yberattacks cost financial services firms more to address and deal with than in any other industry, while the rate of breaches in finance has tripled over the past five years, according to a
report from Accenture and the much-respected Ponemon Institute. The report, Cost of Cyber Crime Study, examines the costs that organisations incur when responding to cybercrime incidents and applies a methodology that allows year-over-year comparisons.
Ponemon found that the average cost of cybercrime for financial services companies globally has increased by more than 40% over the past three years, from $12.97 million per firm in 2014 to $18.28 million in 2017 – significantly higher than the average cost of $11.7 million per firm across all industries included in the study. The analysis focuses on the direct costs of the incidents and does not include the longer-term costs of remediation.
However, the report also notes while cyber attacks have a greater financial impact on the financial services industry than on any other industry, financial services firms continue to make prudent and sophisticated security technology investments that contribute to reducing the cost of breaches significantly. The greatest proportion of financial services firms’ cyberdefence spending is for more advanced solutions such as security intelligence systems, followed by automation, orchestration and machine-learning technologies.
“While the cost of cybercrime for financial services companies continues to rise, our research found that these companies have
Key findings of the report
• The average number of breaches per company has more than tripled over the past five years, from 40 in 2012 to 125 in 2017; that is slightly below the global average of 130 across all industries.
• Nearly two-thirds (60%) of financial services companies’ total security costs is spent on containment and detection of cyber breaches. The greatest impact of cyber breaches on financial services firms is business disruption and information loss, which together account for 87% of the cost to respond to cybercrime incidents, with revenue loss accounting for only 13%.
• The report notes that more can be done with regards to security technologies deployed in financial services. Only one-quarter (26%) of financial-services companies have actually deployed AI security technologies, and fewer than one-third (31%) use advanced analytics to fight cybercrime.
Financial services firms are increasingly at risk of cyberattack
considerably more balanced and appropriate spending levels on key security technologies to combat sophisticated attacks than do those in other industries,” said Chris Thompson, a senior managing director at Accenture, who leads financial services security and resilience in the company’s Security practice. “This is particularly true with regard to the use of automation, artificial intelligence and machine-learning technologies, which could be critical to future cybersecurity efforts.”
Banks beating back malware attacks
At the same time, financial services firms appear to be less affected than other industries by more common forms of cyberattacks. While 2017 saw a string of malware attacks – including the WannaCry and Petya attacks, which cost several global firms hundreds of millions of dollars in lost revenues – malware attacks were among the least costly types of cyberattacks for financial services companies. The costliest types of attacks for banks and insurers are denial of services attacks (DOS), phishing and social engineering, and malicious insiders.
“Banks and other financial services firms have implemented advanced solutions for malware, reducing the susceptibility to such attacks, so the cybercrimes they’re currently grappling with are largely different from those affecting other industries,” Thompson said. “One such threat is identifying bad actors within their own organisation and figuring out the right combination of human effort with technologies to combat this growing issue. One thing is certain, however: when it comes to fighting cybercrime, organisations can’t hire their way out of this issue, as there simply aren’t enough talented cyber professionals out there.”
www.ibsintelligence.com | © IBS Intelligence 2018
TheDigitalWay / pixabay
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46 |
Page 47 |
Page 48 |
Page 49 |
Page 50 |
Page 51 |
Page 52
