Intelligent CISO Issue 93 | Page 31

A gripping boardrooms as 88 % of cybersecurity and information security leaders surveyed at UK and US organisations now express concern about state-sponsored cyberattacks.
STATE-SPONSORED CYBERATTACKS

88 % of UK and US organisations concerned about state-sponsored cyberattacks as national threat levels surge

New findings from IO show boards are increasingly alarmed by geopolitical cyberthreats as businesses call for stronger government support.
growing sense of unease is

A gripping boardrooms as 88 % of cybersecurity and information security leaders surveyed at UK and US organisations now express concern about state-sponsored cyberattacks.

The latest State of Information Security Report from IO( formerly ISMS. online) confirms that geopolitical cyberthreats have become a pressing business risk and should now be a board-level concern. The figure comes amid a sharp escalation in hostile activity targeting critical infrastructure and the private sector.
Despite the increase in nation-state threats, a third of UK and US organisations surveyed also believe that governments aren’ t doing enough to support and protect businesses, a sentiment that underscores the growing expectation for stronger public – private co-operation in defending both national and commercial interests.
The 88 % statistic from IO’ s research demonstrates that organisations are increasingly aware of the strategic nature of cyber-risk and that the geopolitical threat is increasing, with 33 % of organisations surveyed concerned about an expanded threat landscape targeting their own systems.
Organisations can therefore no longer assume they are peripheral to nation-state campaigns as any connected business could become collateral damage. For example, last month the UK government investigated whether hundreds of Chinese-made buses could be controlled remotely by their manufacturer Yutong, making them vulnerable to interference. In October the UK National Cyber Security Centre said‘ highly sophisticated’ China,‘ capable and irresponsible’ Russia, Iran and North Korea were the main state threats in its annual review.
Chris Newton-Smith, CEO of IO, said:“ When it comes to threats facing CNI, there is a significant national effort going into protecting vital assets. However, at the same time, it also carries a stark warning. If an organisation is connected to the right systems, servicing critical infrastructure, or simply handling sensitive data, it could be targeted by nation-state adversaries.
“ The fact that 88 % of organisations are concerned about this threat is a clear indicator that geopolitically linked cyberrisk is now a strategic concern, not just a technical one”, Newton-Smith continues.
Businesses are expressing growing concerns over the escalating risk posed by nationstate cyberactivity, with fears spanning operational, reputational and financial impact. The most pressing issue highlighted in IO’ s research is the threat of widespread data loss or inaccessibility, such as through DNS attacks or major cloud outages, cited by 41 % of respondents.
Close behind are anxieties over reputational damage if systems are compromised indirectly( 40 %) and the potential for supply chain-driven operational disruption( 38 %). Organisations are also worried about the possibility of interruptions to critical national infrastructure, including power, transport and communications( 36 %) as well as the security and availability of data hosted in regions considered to be key adversaries( 35 %).
These concerns are mounting amid rising regulatory scrutiny and a growing expectation from customers and partners to demonstrate resilience, each cited by around one-third of organisations.
WWW. INTELLIGENTCISO. COM 31