2021-12-08-德勤-2021年网络安全前瞻调研报告正式发布_19页_6mb

Deloitte 2021 Future of Cyber Survey Summary

Executive Summary Key Points

• Enterprises run complex ecosystems integrating legacy infrastructure, hybrid IT, and third-party clouds, requiring new management approaches.
• C-levels (CFOs, CIOs, CISOs) cite data management complexity (44%) and cyber risk prioritization challenges as top barriers.
• 94% of CFOs plan financial system/cloud migration, increasing attack surfaces, but visibility into threats has risen (69% report increased threats).

Zero Trust Architecture

• Foundational principle: Never trust, always verify. Requires dynamic, risk-based access control.
• 72% of respondents experienced 1-10 cyber incidents in 2021.
• Common misconceptions: Zero Trust requires massive overhaul (false—incremental steps work).
• Benefits: 63% cite enhanced customer trust, 59% improved data privacy, 50% streamlined compliance.

Digital Transformation & Cyber Strategy

• Cyber budgets are rising (e.g., >$30B firms spend >$100M/year), but maturity varies.
• Key challenges: Siloed teams, lack of visibility, and balancing speed with security.
• Recommendations:
  • CISO directly report to CEO for cross-functional oversight.
  • Integrate security early in product development (Zero Trust from the start).
  • Prioritize security investments (threat detection: 10%, cloud: 13%, data security: 12%).

Emerging Technologies

• Security is key to adoption (64% for quantum computing, 59% for privacy).
• OT/ICS vulnerabilities exposed by connectivity (remote device management risks).
• Governance: Clear ownership, multi-year plans, and cross-industry partnerships.

Customer Experience & Data Ethics

• Personalization vs. privacy: Companies must balance data use with security.
• Increased trust scores correlate with repeat business (540% rise if perceived reliable).
• Regulatory compliance alone isn’t enough; transparency and human-centric design are critical.

Cross-Industry Insights

• Energy/Industrials: Urgent Zero Trust adoption due to ransomware (Colonial Pipeline case).
• Health/Life Sciences: Cyberattacks threaten IP and patient data, requiring anonymization.
• Finance: Regulatory scrutiny (e.g., EU fines) drives security upgrades.

Future Outlook

• Zero Trust: Evolving from defense-in-depth to continuous verification.
• Cultural Shift: Cybersecurity must transition from cost center to value creator.
• Collaboration: Knowledge sharing (ISACs, peer networks) accelerates risk mitigation.
• Actionable Steps: Full board support, executive buy-in, and integrating security early for agile transformation.