Cybersecurity threats can cost organisations USD 10.3 million in losses
A Frost & Sullivan study commissioned by Microsoft reveals that a large-sized organisation in India incurs an average of USD 10.3 million of economic loss from cyber attacks whereas a mid-sized organisation incurs an average of USD 11K. Cybersecurity attacks have also resulted in job losses across different functions in more than three in five (64 per cent) organisations that have experienced an incident during the survey period.
The study, titled “Understanding the Cybersecurity Threat Landscape in the Asia Pacific: Securing the Modern Enterprise in a Digital World”, aims to provide business and IT decision makers with insights on the economic cost of cybersecurity breaches in the Asia-Pacific region identify the gaps in organisations’ cybersecurity strategies. The study involved a survey of 1,300 business and IT decision makers ranging from mid-sized organisations (250 to 499 employees) to large-sized organisations (>than 500 employees). The study reveals that more than three in five organisations (62 per cent) surveyed in India have either experienced a cybersecurity incident(30 per cent) or are not sure if they had one as they have not performed proper forensics or data breach assessment (32 per cent).
To calculate the cost of cybercrime, Frost & Sullivan has created an economic loss model based on macroeconomic data and insights shared by the survey respondents. This model factors in three kinds of losses which could be incurred due to a cybersecurity breach, viz., direct (financial losses associated with the incident; indirect ( the opportunity cost to the organisation such as customer churn due to reputation loss); and induced (impact on the broader ecosystem and economy, such as the decrease in consumer and enterprise spending). “Although the direct losses from cybersecurity breaches are most visible, they are but just the tip of the iceberg,” said Benoy CS, Director & Business Unit Head - Digital Transformation Practice Middle East, North Africa & South Asia, Frost & Sullivan. “There are many other hidden losses that we have to consider from both the indirect and induced perspectives, and the economic loss for organisations suffering from cybersecurity attacks can be often underestimated.”
The study also examined the current cybersecurity strategy of organisations in India. It found that for organisations that have encountered cybersecurity incidents, remote code execution and data exfiltration are the biggest concerns as they have the highest impact with the slowest recovery time. A large number of cybersecurity tools and a complex environment also add to the turnaround time. Most organisations lack a cybersecurity strategy, while for a large majority cybersecurity was an afterthought. About 59 per cent (3 in 5) of respondents in the Study said that the fear of cyber attacks has hindered digital transformation projects. (37 per cent) see cybersecurity strategy only as a means to safeguard the organisation against cyber attacks rather than a strategic business enabler. A mere 18 per cent seeing cybersecurity as a digital transformation enabler.
Focus on AI: While the threat of cyber-attacks is ever increasing, the report also highlights that rapid advancements in technologies like AI will act as a key equalising factor. The study reveals that more than nine in ten (92 per cent) organisations in India have either adopted or are looking to adopt an AI approach towards boosting cybersecurity. Additionally, more than one in five (22 per cent) of Indian organisations have already witnessed benefits of using AI to achieve faster and more accurate detection of threats.
In conclusion, the report also recommends a set of best practices for organisations to improve their defence against cyber threats. This includes positioning cybersecurity as a digital transformation enabler; ongoing investment in strengthening security fundamentals; reducing the number of tools and complexity, and leveraging integrated best-of-suite tools; continuously assessing and reviewing compliance and leveraging AI and Automation to increase capabilities and capacity. According to Mr Dhakad, “The ever-changing threat environment is challenging, but there are ways to be more effective using the right blend of modern technology, strategy, and expertise. Microsoft is empowering businesses in India to take advantage of digital transformation by enabling them to embrace the technology that’s available to them, through its secure platform of products and services, combined with unique intelligence and broad industry partnerships.”
