埃森哲网络攻击成本报告网络安全英文2019643页

NINTHANNUALCOSTOFCYBERCRIMESTUDYUNLOCKINGTHEVALUEOFIMPROVEDCYBERSECURITYPROTECTIONIndependentlyconductedbyPonemonInstituteLLCandjointlydevelopedbyAccentureTHECOSTOFCYBERCRIMECONTENTSForeword4TheCybercrimeEvolution6Nation-state,SupplyChainandInformationThreats6NewRisksfromInnovationandGrowth8HumansAreStilltheWeakestLink9BenchmarkingCybersecurityInvestment10MoreAttacksandHigherCosts10TheValueatRiskfromCybercrime14AssessingLevelsofInvestment15ImprovingCybersecurityProtection17EveryTypeofAttackIsMoreExpensive17TheImpactofCyberattacksIsRising18TargetedInvestmentsTackleCybercrime21SecurityTechnologiesCanMakeaDifference24UnlockingCybersecurityValue27ThreeStepstoUnlockCybersecurityValue27AbouttheResearch30FrequentlyAskedQuestions30Framework32Benchmarking36Sample38Limitations41ContactUs44Theninthannualcostofcybercrimestudyhelpstoquantifytheeconomiccostofcyberattacksbyanalyzingtrendsinmaliciousactivitiesovertime.Bybetterunderstandingtheimpactassociatedwithcybercrime,organizationscandeterminetherightamountofinvestmentincybersecurity.Lookingbackatthecostsofcybercrimetodateishelpful—butlookingforward,sothatbusinessleadersknowhowtobesttargettheirfundsandresources,isevenmorebeneficial.Thisreportdoesjustthat.Byunderstandingwheretheycanachievevalueintheircybersecurityefforts,businessleaderscanminimizetheconsequences—andevenprevent—futureattacks.OURSTUDYHELPSORGANIZATIONSTOADDRESSONEOFSECURITY’SBURNINGPLATFORMS.WEREVEALHOWIMPROVINGCYBERSECURITYPROTECTIONCANREDUCETHECOSTOFCYBERCRIMEANDOPENUPNEWREVENUEOPPORTUNITIESTOUNLOCKECONOMICVALUE.FOREWORD[e-mail][e-mail]withyouthisnintheditionoftheCostofCybercrimestudy.Ourextensiveresearchincludesin-depthinterviewsfrommorethan2,600seniorsecurityprofessionalsat355organizations.Inside,youwillfindinsightsthatarerelevanttosecurityprofessionalsandbusinessleaderstohelpusallbetterprotectourorganizations.Webelievethesefindings,togetherwithourexperienceandrecommendations,canhelpexecutivestoinnovatesafelyandgrowwithconfidence.Asindustriesevolveanddisruptthecurrentenvironment,threatsaredramaticallyexpandingwhilebecomingmorecomplex.Thisrequiresmoresecurityinnovationtoprotectcompanyecosystems.Thesubsequentcosttoourorganizationsandeconomiesissubstantial—andgrowing.MyteamandIarealwaysonhandtodiscusswhatthelatesttrendsmeantoyourbusiness.Readontofindoutwhatitistakingtoprotectyourorganizationtodayandhowyoucanconvertyourcybersecuritystrategytoachievegreatervaluefortomorrow.Onceagain,thePonemonInstituteisdelightedtoworkwithAccentureSecurityonthiscomprehensiveCostofCybercrimeStudy.Fromarelativelymodeststart,wehavenowgrownthescopeofourresearchtoinclude11countriesand16industrysectors.Wehaveextendedourresearchtimeline,too.Thisyear,wehavecollaboratedwithAccenturetomodelthefinancialimpactofcybercrimeacrosstheseindustriesoverthenextfiveyears—togetabetterunderstandingofhowcybersecuritystrategiescanmakeadifferenceinthefuture.Wefeelsurethatthisreportwillbeausefulguideasyouattempttonavigatethecyberthreatscape.Weknowthatourworkisbeingactivelyusedtodaybyprestigiousorganizations,suchastheWorldEconomicForumandtheUnitedStatesGovernment,tohelpshapedefenses.ThePonemonInstituteisproudtoteamwithAccenturetoproducetheseresearchfindings.Webelievethisreportnotonlyillustratesourjointcommitmenttokeepingyouinformedaboutthenatureandextentofcyberattacks,butalsooffersyoupracticaladvicetoimproveyourcybersecurityeffortsgoingforward.49THANNUALCOSTOFCYBERCRIMESTUDYFEWORGANIZATIONSWOULDRESISTTHECHANCETOREDUCETHEIROVERALLCOSTOFCYBERCRIME.WHATIFTHEYCOULDALSOOPENUPNEWREVENUEOPPORTUNITIESATTHESAMETIME?Our2019CostofCybercrimestudy,nowinitsninthyear,offersthatenticingprospect.Inthisreportweshowhowbetterprotectionfrompeople-basedattacks,placingapriorityonlimitinginformationloss,andadoptingbreakthroughsecuritytechnologiescanhelptomakeadifference.THECYBERCRIMEEVOLUTIONThe2019CostofCybercrimestudycombinesresearchacross11countriesin16industries.Weinterviewed2,647seniorleadersfrom355companiesanddrewontheexperienceandexpertiseofAccentureSecuritytoexaminetheeconomicimpactofcyberattacks.Inanever-changingdigitallandscape,itisvitaltokeeppacewiththetrendsincyberthreats.Wefoundthatcyberattacksarechangingdueto:•Evolvingtargets:Informationtheftisthemostexpensiveandfastestrisingconsequenceofcybercrime—butdataisnottheonlytarget.Coresystems,suchasindustrialcontrolsystems,arebeinghackedinapowerfulmovetodisruptanddestroy.•Evolvingimpact:Whiledataremainsatarget,theftisnotalwaystheoutcome.Anewwaveofcyberattacksseesdatanolongersimplybeingcopiedbutbeingdestroyed—orchanged—whichbreedsdistrust.Attackingdataintegrityisthenextfrontier.•Evolvingtechniques:Cybercriminalsareadaptingtheirattackmethods.Theyareusingthehumanlayer—theweakestlink—asapathtoattacks,throughincreasedphishingandmaliciousinsiders.Othertechniques,suchasthoseemployedbynation-stateattackstotargetcommercialbusinesses,arechangingthenatureofrecovery,withinsuranceco