New analysis from Accenture is warning that a majority of global organizations struggle to identify and fully protect mission critical assets from cyberattacks.
According to the newly released Accenture Security Index, only one in three organizations (34 percent) have the ability needed to monitor for threats to critical parts of their business.
The index has highlighted poor performance in critical cybersecurity capabilities across 15 countries and 12 industries.
With the frequency and scope of serious cyberattacks on the rise, nearly three quarters of organizations (73 percent) globally cannot identify and fully protect their corporate high-value assets and processes, Accenture said.
The index is based on a comprehensive model measuring 33 specific cybersecurity capabilities. It provides a new benchmark to determine what high performance security looks like and what it takes for organizations to establish cybersecurity success.
Country-level performance weak across important capabilities
Globally, the average organization has high performance in 11 of the 33 cybersecurity capabilities analyzed. At the top end of the scale, only 9 percent of organizations managed to achieve high performance in more than 25 of the 33 cybersecurity capabilities.
In the UK, which tops the country roster along with France for cybersecurity performance, the average organization achieved high performance in 44 percent – or 15 out of 33 – capabilities.
The UK ranks highest overall for cooperation with third-parties during crisis management (52 percent) and communication of cyber incidents as part of business alignment (55 percent).
In comparison, Spain ranks at the bottom of the performance list with companies claiming high performance in only 22 percent – or seven of 33 cybersecurity capabilities.
The US is fifth on the list, with the typical company having high performance in 12 of the 33 capabilities. In line with its overall ranking, the US has average performance across the remaining cybersecurity capabilities with the exception of governance and leadership where it ranks second overall in creating a security-minded culture (53 percent) and cooperation with third-parties during crisis management (42 percent).
Wide range of variation in industry-level performance
Communication companies have the highest performance in 11 capabilities including the protection and recovery of key assets (49 percent) and monitoring for business-relevant threats (47 percent).
Banking organizations have highest performance in eight capabilities including “what-if” threat analysis (47 percent) and third-party cybersecurity in their extended business ecosystem (44 percent).
High technology companies rank highest in seven capabilities including the ability to create a security-minded culture (54 percent) and recovering from cyber incidents (48 percent).
Life Sciences organizations are bringing up the rear with an overall ranking of only 19 percent, meaning organizations exhibited high performance in only six capabilities on average.
Life Sciences also rank lowest in all but one of the 33 cybersecurity capabilities including the ability to ensure stakeholder involvement (12 percent) and design for the protection of key assets (13 percent).
Progress on cybersecurity has not kept pace with highly motivated attackers
Kelly Bissell, managing director of Accenture Security commented:
“A turning point has been reachedfor cybersecurity. While organizations have improved their security over the last few years, progress has not kept pace with the sophistication of highly motivated attackers"
“A new approach is clearly needed. One that protects the organization from the inside out and across the entire industry value chain—from the wellhead to the oil pump. And the start of this must be a new, more comprehensive definition of what constitutes cybersecurity success based on impact to the business.”
To gauge the effectiveness of current enterprise security efforts and the adequacy of their existing investments, Accenture surveyed 2,000 top enterprise security practitioners representing companies with annual revenues of $1 billion or more. The results of the survey were analyzed in collaboration with Oxford Economics to develop the Accenture Security Index, which aggregates scores across 15 countries and 12 industries, providing the ability to compare the relative strength of all organizations to protect themselves from cyberattacks.
For more information visit www.accenture.com/securityindex
Albion Water, the first NAV (New Appointment & Variation) to have been established in1999 and now under the ownership of SDS Water Group, has appointed Andy Holland as its new Director of Business Development.
UK water companies are invited to join an upcoming webinar which will explore how the sector can take indirect potable reuse (IPR) from concept to full-scale operational reality.
James Sumsion, CEO of predictive water intelligence specialists Kohtari, says the water sector needs to take a giant leap forward, so that it can anticipate and act upon water quality issues - rather than merely react.
Ray Moulds, Sales Director at Flood Control International, takes a look at how automated sliding floodgates are supporting secondary containment at water and sewerage company sites.
Hear how Scottish Water has completed its £235 million Ayrshire Glasgow Resilience Project - customers across Greater Glasgow, Ayrshire and East Renfrewshire will now benefit from a more secure and resilient water supply.
Hear how United Utilities is accelerating its investment to reduce spills from storm overflows across the Northwest.
Find out more about the remarkable career opportunities on offer at WSP - scroll down to watch the inspirational video.