sb-nz logo
Story image

Asia Pacific feeling financial brunt of breaches - but it's not all bad news

11 Mar 2019

Asia Pacific firms are feeling the financial impact from cyber breaches more than any other region in the world, according to new insights from Cisco’s 2019 CISO Benchmark Study.  

Last week at Cisco Live Melbourne, the company released new Asia Pacific statistics from the global report. The new insights show that 17% of companies across Australia, China, India, and Japan have felt the financial impact of more than US$5 million from their most severe breach in the last year. This is more than twice the global average of 8%.

Australia and Japan have been most impacted by the financial impact – 47% of Australian respondents and 12% of Japan respondents reported costs greater than US$5 million.

At Cisco Live, Cisco’s vice president of global security sales John Maynard, and director of cybersecurity Steve Moros explained that CISOs are now acknowledging the adage of ‘it’s not about if there’s a breach, but when’.

What’s keeping CISOs up at night? “There is a perennial, sophisticated changing adversary that’s collaborating. The attack surface is increasing exponentially as more devices connect to the network,” Moros and Maynard say.

But it’s not all bad news. The report shows that 39% of Asia Pacific organisations were able to contain the cost of a breach to less than US$500,000.

CISOs are also changing the way their business measures up to key security metrics. In a breach process, there are three main factors: Time to detect, time to patch, and time to remediate.

Now time to remediate is the main metric of measuring security effectiveness but it’s also the most difficult metric, explain Moros and Maynard.

The report adds that 48% of Asia Pacific respondents use time to remediate as the key metric, up from 36% in 2018.

Organisations are still struggling to consolidate alerts across multiple vendors and solutions in their security environment.

In Asia Pacific, 17% of respondents have more than 20 vendors in their environment – compared to 14% globally. However, more than half (54%) have fewer than 10 vendors in their environment.

Moros and Maynard explain that vendor fragmentation is having an impact on security preparedness.

The report shows that 93% of respondents in Asia Pacific said it was somewhat or very challenging to orchestrate cybersecurity alerts from multiple vendor products.

“Companies have traditionally approached building their security capabilities in a piecemeal manner by adopting solutions to address specific challenges at the time,” comments Cisco APJC director of global security sales organisation, Stephen Dane. 

“While this may help patch individual vulnerabilities, it creates a bigger issue as having more point solutions that don’t work together increases their security effectiveness gap.”

He adds that cybercriminals work together – so defenders also need to take a similar collaborative approach. Intelligence sharing is one way of doing that. 

“The first step in that direction is to have strategic approach to building a comprehensive security environment and ensuring that the solutions are integrated and can work together to defend against potential attacks,” he explains.

Moros and Maynard add that Cisco actively collaborates with vendors and intelligence teams. Cisco Talos, the company’s own threat intelligence group, publishes vulnerability information, advisories, and also offers cybersecurity products.

Story image
VMware reveals plans to acquire Octarine, going all in for Kubernetes
VMware says once the acquisition is completed, Octarine’s integration will provide new security features for containerized applications running in Kubernetes, and will enable security capabilities as part of the fabric of the existing IT and DevOps ecosystems.More
Story image
CrowdStrike expands Linux protection, adds machine learning prevention
CrowdStrike says its solution delivers proven breach prevention and visibility from its cloud-delivered platform via a single lightweight agent.More
Story image
NVIDIA announces new Mellanox SmartNIC for the modern data center
NVIDIA says the new SmartNIC draws on software-defined, hardware-accelerated engines to alleviate the bulk of network and security processing power typically applied to CPUs.More
Story image
Four tips for organisations to help future-proof their OT security strategy
IT and OT networks are founded on different and often conflicting priorities, making IT-OT security challenging for businesses. Only when the needs of both environments are thoroughly understood can digital convergence be successful.More
Story image
Report: Tech industry most attacked sector
"The current global crisis has shown us that cyber criminals will always take advantage of any situation and organisations must be ready for anything."More
Story image
HID Global and Keyfactor team up for zero-trust security
“The combination of HID IdenTrust digital certificates and the Keyfactor platform enables our enterprise customers to achieve frictionless management and deployment of digital certificates."More