This groundbreaking global study, which surveyed more than 2,200 companies in nearly 40 countries, found that while cyber is one of the fastest growing risks for companies across the globe, and information technology assets are often as valuable as property assets, companies are only protecting 12 percent of those assets compared to 51 percent of tangible property assets.
“This survey is unique as it focused on the relative financial statement impact of cyber incidents compared to tangible asset vulnerabilities,” said Kevin Kalinich, global practice leader for cyber/network risk at Aon Risk Solutions. “The explosion of cloud computing, mobile devices, big data analytics and the Internet of Things is creating enterprise risk management issues that are rapidly growing with the increased use of information assets and technology. Companies large and small are advised to consider cyber threats in this perspective.”
The report’s findings act as a roadmap for risk managers and finance, helping them take a broader look at their organization’s overall risk profile to help establish comprehensive insurance coverage is in place compared to the impact of each risk on the organization,” added Kalinich.
Dr. Larry Ponemon, Chairman and Founder of the Ponemon Institute added,
“The perception of the risk is interesting. It’s clear that there is a risk and losses can be anticipated, but organizations are not insuring against the risk. This report substantiates a risk manager’s initiatives for how they allocate resources and where they focus.”
Additional findings:
-
Fifty percent of respondents say their company would disclose the loss of property, plant and equipment in its financial statements. However, 34 percent of respondents say information asset losses do not require disclosure.
-
Fifty-two percent of respondents believe their companies’ exposure to cyber risk will increase over the next two years.
-
Nineteen percent of respondents say their company has cyber insurance coverage.
-
Thirty-seven percent of companies surveyed experienced a material or significantly disruptive security exploit or data breach one or more times during the past two years and the average economic impact of the event was $2.1 million.
-
Five years from now the projected growth in the use of internet-connected devices will grow from 10 to 50 billion.
|