Story image

Asia Pacific feeling financial brunt of breaches - but it's not all bad news

11 Mar 2019

Asia Pacific firms are feeling the financial impact from cyber breaches more than any other region in the world, according to new insights from Cisco’s 2019 CISO Benchmark Study.  

Last week at Cisco Live Melbourne, the company released new Asia Pacific statistics from the global report. The new insights show that 17% of companies across Australia, China, India, and Japan have felt the financial impact of more than US$5 million from their most severe breach in the last year. This is more than twice the global average of 8%.

Australia and Japan have been most impacted by the financial impact – 47% of Australian respondents and 12% of Japan respondents reported costs greater than US$5 million.

At Cisco Live, Cisco’s vice president of global security sales John Maynard, and director of cybersecurity Steve Moros explained that CISOs are now acknowledging the adage of ‘it’s not about if there’s a breach, but when’.

What’s keeping CISOs up at night? “There is a perennial, sophisticated changing adversary that’s collaborating. The attack surface is increasing exponentially as more devices connect to the network,” Moros and Maynard say.

But it’s not all bad news. The report shows that 39% of Asia Pacific organisations were able to contain the cost of a breach to less than US$500,000.

CISOs are also changing the way their business measures up to key security metrics. In a breach process, there are three main factors: Time to detect, time to patch, and time to remediate.

Now time to remediate is the main metric of measuring security effectiveness but it’s also the most difficult metric, explain Moros and Maynard.

The report adds that 48% of Asia Pacific respondents use time to remediate as the key metric, up from 36% in 2018.

Organisations are still struggling to consolidate alerts across multiple vendors and solutions in their security environment.

In Asia Pacific, 17% of respondents have more than 20 vendors in their environment – compared to 14% globally. However, more than half (54%) have fewer than 10 vendors in their environment.

Moros and Maynard explain that vendor fragmentation is having an impact on security preparedness.

The report shows that 93% of respondents in Asia Pacific said it was somewhat or very challenging to orchestrate cybersecurity alerts from multiple vendor products.

“Companies have traditionally approached building their security capabilities in a piecemeal manner by adopting solutions to address specific challenges at the time,” comments Cisco APJC director of global security sales organisation, Stephen Dane. 

“While this may help patch individual vulnerabilities, it creates a bigger issue as having more point solutions that don’t work together increases their security effectiveness gap.”

He adds that cybercriminals work together – so defenders also need to take a similar collaborative approach. Intelligence sharing is one way of doing that. 

“The first step in that direction is to have strategic approach to building a comprehensive security environment and ensuring that the solutions are integrated and can work together to defend against potential attacks,” he explains.

Moros and Maynard add that Cisco actively collaborates with vendors and intelligence teams. Cisco Talos, the company’s own threat intelligence group, publishes vulnerability information, advisories, and also offers cybersecurity products.

Bitglass appoints new cloud, business development leaders
The cloud security company has appointed vice presidents for worldwide channels and worldwide business development.
Ping Identity offerings accelerates cloud MFA and SSO adoption
90% of respondents trust MFA as an effective security control to protect identity data in public clouds, yet only 60% of organisations have formally adopted it.
Ingram launches CRM backup on cloud marketplace
AvePoint Cloud Backup for Dynamics 365 is a multi-tenant solution, designed with specific features to enable channel partners and MSPs.
Trend Micro introduces cloud and container workload security offering
Container security capabilities added to Trend Micro Deep Security have elevated protection across the DevOps lifecycle and runtime stack.
Veeam joins the ranks of $1bil-revenue software companies
It’s also marked a milestone of 350,000 customers and outlined how it will begin the next stage of its growth.
Veeam enables secondary storage solutions with technology partner program
Veeam has worked with its strategic technology alliance partners to provide flexible deployment options for customers that have continually led to tighter levels of integration.
Veeam Availability Orchestrator update aims to democratise DR
The ability to automatically test, document and reliably recover entire sites, as well as individual workloads from backups in a completely orchestrated way lowers the total cost of ownership (TCO) of DR.
Nuix eyes legal sector as eDiscovery demand skyrockets
eDiscovery must encompass so much more than email and documents. If you haven’t looked at text messages and online chats, digital images, mobile devices, data in the cloud and social media, you’re not getting the whole story.