- Nearly three-quarters of critical infrastructure operators believe that a serious cyber-attack is “likely” or “somewhat likely” over the next three years
- Proliferation of the IoT is contributing to increased vulnerability
- Information and communications networks and financial networks are the most likely to be attacked
- Outsourcing of IT security solutions appears to be gaining acceptance
- Nearly 90% say their organization has a clear chain of command for dealing with cyber-incursions
A new report released today (October 3rd, 2016) by The Economist Intelligence Unit (EIU) looks at the risk of cyber-attacks on critical infrastructure and how operators of this infrastructure are defending themselves. The report finds that 74% of operators believe that in the next three years, attacks will be more frequent than in the last five. Securing the digital city: cyber-threats and responses, sponsored by NEC, is based on a global survey of 200 operators of critical infrastructure.
A major reason for increased risk is growth in the Internet of Things (IoT)—80% of respondents agreed that proliferation of the IoT and big data will make them more vulnerable to a serious cyber-attack. Telecom and IT service providers are believed to be most at risk of attack because they enable all other critical infrastructure and hence an attack on them would have the widest impact. Banking is viewed as the second most likely target given the high value of the assets held by these institutions.
While outsourcing was once viewed with skepticism by security-minded technology buyers, it seems to have gained acceptance as part of cyber-security efforts: 35% of respondents say they are primarily using third-party relationships to manage their security, while 19.5% said they use a mix of internal and external solutions. Despite an increase in outsourcing of IT security, and the increasing complexity of the IoT, survey respondents feel prepared to deal with rising threats – 87.5% say they have established clear chains of command for cyber-security issues.
Chris Clague, the editor of the report, said:
“The increasing connectedness of critical infrastructure is improving the quality and reach of services, but it is also exposing operators to greater levels of risk from cyber-attacks. Mitigating that risk is more important for critical infrastructure than perhaps any other sector because their operations are responsible for the day-to-day functioning of society. It is encouraging that nearly nine in ten respondents believe their organisation has a clear command structure to deal with attacks, but they will also need to be continually fine tuning their portfolio of tools and resources.”
London: Mathew Hanratty, corporate communications manager
Tokyo: Chris Clague, senior editor
About The Economist Intelligence Unit
The Economist Intelligence Unit is the world leader in global business intelligence. It is the business-to-business arm of The Economist Group, which publishes The Economist newspaper. The Economist Intelligence Unit helps executives make better decisions by providing timely, reliable and impartial analysis on worldwide market trends and business strategies. More information can be found at www.eiu.com or www.twitter.com/theeiu.
NEC Corporation specialises in the integration of IT and network technologies for businesses and people around the world. By providing a combination of products and solutions that cross utilize the company’s experience and global resources, NEC’s advanced technologies meet the complex and ever-changing needs of its customers. NEC brings more than 100 years of expertise in technological innovation to empower people, businesses and society. For more information, visit NEC at http://www.nec.com