Keep in touch Global State of Information Security Survey 2015
www.pwc.be/technology Keep in touch We’re here to listen Global State of Information Security Survey 2015 We would be delighted to have a deeper discussion with you. Do not hesitate to contact us personally. Floris Ampe Partner Filip De Wolf Partner Tel: +32 (0)2 710 41 64 Tel: +32 2 (0)710 42 51 [email protected] [email protected] Technology consulting Looking for an expert in a specific area? Area of expertise Who can I contact? Operation Technology, Incident Response and Threat Management Peter Versmissen Emerging Technology and Consumer Technology Security Marc Sel Privacy, Security assessments, review and tests Gaël Hachez Bringing cyber security on board level and how to execute it in your organisation and IT department Jan De Meyer Cyber insurance Filip De Wolf [email protected] [email protected] [email protected] [email protected] [email protected] Deployment of cyber security within a European government context Steven Ackx [email protected] The number of security incidents continue to soar Globally, the total number of security incidents detected by survey respondents climbed to €32 billion this year, an increase of 48% over 2013. 75% of all Belgian respondents indicate to have encountered a security incident on a monthly basis. Security incidents happen on all IT layers (application, data, system and network) but also on the people layer as 15% of the Belgian respondents have encountered social engineering attacks against their employees About PwC PwC helps organisations and individuals create the value they’re looking for. We’re a network of firms in 157 countries with more than 195,000 people who are committed to delivering quality in assurance, tax and advisory services. Find out more and tell us what matters to you by visiting us at www.pwc.com. PwC refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity. Please see www.pwc.com/structure for further details. © 2014 PwC. All rights reserved. How can your organisation change the game? The case of Belgium Cyber risks will never be completely eliminated. Today, organisations must remain vigilant and agile in the face of a continually evolving threat landscape. How is Belgium playing the game? Five actions to adapt More than 50% of the Belgian respondents indicated to have lost intellectual property or encountered the compromise or damage of customer, employee and internal records. This figure could be explained by the fact that, in general, less than 50% of the respondents have encrypted their data stores, whereas only 37% reported to use a data loss prevention solution. At a worldwide level, financial losses associated with the security incidents range from €75.000 to €7.500.000 for 60% of the organisations and are as such higher than the European average. A simple explanation for these important financial losses is the fact that only 37% of the organisations have a cyberinsurance. At a European level, the majority of financial losses include the loss of customer business followed by legal expenditures. For Belgium however, the key cost factors are investigations and forensics. 20% of the Belgian respondents do not know the number of security incidents on a yearly basis, while 40% has no insight on the financial impact of their security incidents. The majority, about 70%, of the respondents specified to have classic prevention solutions, such as firewalls, in place. In contrast, no more than 40% of the respondents indicated to use more advanced safeguards like malicious code-detection tools. your organisation’s security investments Further improve. Strengthen collaboration. The type of respondents would account for the lacking insight in security incidents. However, another explanation could be that organisations have an ineffective security strategy and practice in place. Almost half of the respondents report having a SIEM solution and securityevent-correlation tools in place. Moreover we could conclude that not all organisations employ analytics to model and identify security incidents. If you are not connected to the conversations, you are going to be lost. In today’s threat environment, there is no reason for not collaborating. Hayes of CenterPoint • Belgian organisations, in contrast to European ones, do not plan a formal collaboration with industry peers to address security risks, fearing disabuse from involved parties as attention would be drawn to their potential weaknesses. • The limited cross-organisation involvement leads to a decentralised approach for addressing security incidents, postand pre-incident. • Outsourcing might be a solution to profit from scale advantages on security expenditures. However, only 29% of Belgian organisations (50% at European level) indicated conducting compliance audits of third parties that process personal identifiable information of employees and customers.
© Copyright 2024