Sophisticated monitoring tools can identify a breach before it gets out of hand. Advanced diagnostics classify how critical the attack could become. Semi-autonomous measures can execute a proven response within seconds, with the right equipment. But is the brave new world of cyber defence innovation really helping us hold back cyber-crime? Or is it making us lazier, more complacent, and less aware of the real threats?
Cyber-security as a growing concern
There were an average of 80 to 90 million cybersecurity events in 2015. Half of the 28 million SMEs are directly targeted by attackers. Global spending in cyber security reached around 90 billion dollars in 2017 and is on track to hit 170 billion by 2020. Attacks are also becoming more sophisticated: average data breach cost was 3.79 million dollars in 2015 and rising.
How innovation thwarts sophisticated attackers
Some products help cut through the confusion of whether an intrusion is malicious or benign, reducing the human factor in threat assessment. Others focus on damage mitigation once an attacker is inside, leading attackers away from real targets and capturing a footprint of the attack.
The greatest threat: the human element
IBM's 2016 Cyber Security Intelligence Index found 60 percent of all cyber attacks were caused by insiders. 75 percent of those were malicious. 25 percent were entirely inadvertent, so 15 percent of all attacks trace back to negligence alone. Misplaced devices, unsecured networks, unapproved app usage, weak login credentials, phishing scams. Each can lead to significant vulnerability for the entire enterprise.
An informed workforce and sophisticated IT
Innovation in cyber security is key, but only so far. It has to pair with a knowledgeable, cyber-aware workforce that recognises cyber security is not a product but a mindset.
Originally published 28 November 2017. Migrated to the new IRC site in 2026.