New Cloudflare study reveals that 78% of respondents experienced a cybersecurity incident in the past year; only 38% indicating they were highly prepared to defend against them
India, August 24, 2023— Cloudflare, Inc. (NYSE: NET), the security, performance, and reliability company helping to build a better Internet, today released a new study focused on cybersecurity in Asia Pacific. The report, called “Securing the Future: Asia Pacific Cybersecurity Readiness Survey,” shares the latest data on cybersecurity preparedness in the region, revealing how organisations are coping with rising volumes of cybersecurity incidents, their levels of preparedness, and the outcomes experienced. These new findings report that the majority of organisations are not prepared to handle cybersecurity attacks, despite the fact that attacks are on the rise.
Organisations face rising volumes of cybersecurity incidents.
The study, which was conducted across over 4,000 cybersecurity decision makers and leaders across Australia, China, Hong Kong SAR, India, Indonesia, Japan, Malaysia, New Zealand, the Philippines, Singapore, South Korea, Taiwan, Thailand, and Vietnam, found that 78% of respondents experienced at least one cybersecurity incident in the past 12 months. Of those who experienced a cybersecurity incident, 80% reported four or more incidents. And 50% experienced 10 or more cybersecurity incidents, with 72% forecasting an increase in the next 12 months.
The majority of organisations are not prepared to respond to attacks, resulting in millions in losses and fines.
Despite the increasing frequency of cybersecurity incidents, only 38% consider themselves highly prepared, with those in healthcare (16%), education (13%), government (10%), and tourism (10%) reporting they are most likely unprepared to withstand an incident.
What’s more, about 63% of survey respondents reported that the financial impact of cybersecurity incidents on their organisations was at least US$1 million over the past 12 months, with 14% suffering a loss of more than US$3 million. Asia-Pacific organisations were also concerned with regulatory action. 33% of respondents said their organisation reported breaches to the relevant authorities, with 26% paying a fine and the same number facing legal action.
The study also shows talent constraints are still prevalent in the region, with a lack of talent cited by 60% of respondents when discussing challenges to cybersecurity preparedness.
Businesses contend with different forms of online attacks while trying to secure a hybrid workforce.
Survey respondents reported web attacks, phishing, distributed denial-of-service (DDoS), insider threats, and stolen credentials as the cyberattacks they experienced in the past 12 months. Respondents also ranked planting spyware as the primary goal of cybercriminals, followed by financial gain, data exfiltration, and ransomware. Notably, the three most pressing challenges cybersecurity decision-makers and leaders face are: securing a hybrid workforce (51%); defending against cyberattacks (48%); and deploying zero trust (42%).
More products do not mean More Protection
Most of the respondents surveyed currently have between six and 15 products in their cybersecurity architecture, while larger organisations have almost twice as many, with 20 or more. Juggling multiple solutions has somewhat negatively impacted effectiveness, hinting that organisations should be looking to simplify. In the study, only 39% of organisations with less than 15 solutions experienced 10 or more cybersecurity incidents. However, 73% of those with more than 15 solutions experienced the same. On the other hand, 80% of organisations with less than 15 solutions were able to resolve incidents in less than 12 hours, while only 65% of those with more than 15 solutions have done the same.
Most organisations expect to increase budgets in the next 12 months.
In the past 12 months, 53% of survey respondents spent between 11% and 20% of their organisation’s entire IT budget on cybersecurity, while another 28% spent more than 20% of their total IT budget. Healthcare, transportation, and finance were the industries that spent the most on cybersecurity, while education, gaming, government, and manufacturing spent the least. When it comes to future plans, 67% of all respondents expect their cybersecurity budgets to increase in the next 12 months, while 22% expect to maintain their current spending.
“While preparedness is key, organisations continue to grapple with a cybersecurity landscape that’s more volatile and complex than ever. Simply increasing spend or adding more products isn’t the answer for the best outcome either. It’s important to build a strong security culture that empowers business leaders to approach cybersecurity as a strategic imperative to every organisation, including technological and cost consolidation, in order to get the double benefit of spending less while having a more robust and simpler-to-manage cybersecurity infrastructure,” said Jonathon Dixon, Vice President and Managing Director, Asia Pacific, Japan, and China at Cloudflare.
Today, some of Asia Pacific’s most sophisticated organisations turn to Cloudflare for their cybersecurity needs, including Envato, JCB, and Melbourne Airport. “We’re a cloud-native company with a global workforce. Our staff needs to access key company resources from wherever they are in the world. Cloudflare was a really good fit—a secure, effective, and simpler approach than traditional access controls,” said Ross Simpson, Senior Principal Security Engineer at Envato.
To find out more about the APAC Cybersecurity Study, please check out:
- Whitepaper download
Survey Methodology
This survey was conducted by Sandpiper Communications on behalf of Cloudflare across a total of 4,009 cyber security decision-makers and leaders from small (150 to 999 employees), medium (1,000 to 2500 employees), and large (more than 2,500 employees) organizations. Respondents were drawn from a wide range of industries: business and professional services; construction and real estate; education; energy, utilities, and natural resources; financial services; gaming; government; healthcare; IT and technology; manufacturing; media and telecoms; retail; transportation; travel, tourism, and hospitality. Respondents were based in 14 markets across Asia Pacific: Australia, China, Hong Kong SAR, India, Indonesia, Japan, Malaysia, New Zealand, the Philippines, Singapore, South Korea, Taiwan, Thailand, and Vietnam (n = 203 to 426 per country) and were surveyed online and recruited via general business panels. The survey was aimed at building a better understanding of the threat landscape facing Chief Information Security Officers (CISOs) and their teams across the vast and varied territories of Asia Pacific and the actions driving positive results and outcomes. The survey was conducted in July 2023.
Also read: How MSMEs can leverage HR tech for workplace modernization?
Do Follow: CIO News LinkedIn Account | CIO News Facebook | CIO News Youtube | CIO News Twitter
About us:
CIO News, a proprietary of Mercadeo, produces award-winning content and resources for IT leaders across any industry through print articles and recorded video interviews on topics in the technology sector such as Digital Transformation, Artificial Intelligence (AI), Machine Learning (ML), Cloud, Robotics, Cyber-security, Data, Analytics, SOC, SASE, among other technology topics
