德勤：2021年网络安全前瞻调研报告正式发布-英文_19页_6mb

2021 Future of Cyber Survey Summary

Core Content

The 2021 Deloitte Future of Cyber Survey highlights the evolving landscape of cybersecurity in the context of rapid digital transformation, the rise of remote work, and the integration of emerging technologies. It underscores the need for a comprehensive, culturally embedded approach to managing cyber risk, emphasizing the importance of visibility, collaboration, and strategic alignment across the organization.

Main Viewpoints

• Cyber Everywhere: The world is moving toward a "cyber everywhere" reality, where digital transformation and the use of cloud technologies are accelerating. This has led to more complex and interconnected ecosystems, increasing cyber risk.
• Cloud Migration: Over 94% of CFOs are considering moving financial systems or ERP to the cloud, indicating a strong shift in organizational infrastructure.
• Rising Cyber Threats: The pandemic has significantly expanded attack surfaces due to the shift to remote work, with 69% of respondents reporting an increase in threats. Operational disruption, IP theft, and share price drops are the top impacts of cyber incidents.
• Zero Trust Architecture: Zero Trust is emerging as a critical framework to secure modern, boundary-less environments. It is not just a technological fix but a cultural shift that requires continuous risk assessment and real-time access decisions.
• CISO Role Evolution: The CISO's role is expanding beyond traditional IT boundaries to influence business strategy, understand innovation, and ensure security is integrated from the start.
• Ethical Data Use: Organizations must balance personalization with privacy, using data ethically and transparently to build trust with customers. Privacy by design and clear communication are essential.
• Collaboration and Governance: Cybersecurity requires collaboration across IT, business lines, and third-party providers. Governance and risk management must be enterprise-wide, with C-suite leaders playing a pivotal role.
• Emerging Technologies: The adoption of emerging technologies is driven by security, data privacy, and compliance. These technologies are increasingly connected to the internet, expanding the attack surface and requiring new security strategies.

Key Information

Survey Methodology

• Conducted by Deloitte and Wakefield Research.
• Polled nearly 600 C-level executives from companies with at least $500 million in annual revenue.
• Included 200 CISOs, 100 CIOs, 100 CEOs, 100 CFOs, and 100 CMOs.
• Survey period: June 6 – August 24, 2021, via online format.

Geographical Distribution

• 40% of respondents are from the Americas.
• 28% from EMEA.
• 32% from Asia Pacific.

Cyber Risk Management

• Cyber Maturity Assessments: 41% of respondents use these to guide cyber investment.
• Risk Quantification Tools: 35% of respondents employ these.
• Cyber Leadership Experience: 23% rely on the experience of the company’s cyber leadership.
• Risk Analysis Frequency: 37% of CIOs and CISOs conduct quarterly risk analyses; 29% monthly.

Cyber Budget Trends

• Cyber budgets are relatively evenly distributed across various programs.
• In 2021, over 75% of respondents with revenue over $30B plan to spend more than $100M on cybersecurity.
• Key areas of investment include threat intelligence, detection and monitoring, cyber transformation, and data security.

Zero Trust Implementation

• Zero Trust is not a single technology but a set of architectural policies.
• It replaces the traditional perimeter-based model with continuous risk assessment and real-time access decisions.
• 72% of organizations experienced between one and 10 cyber incidents in the last year.
• Zero Trust is a multiyear initiative that requires leadership support, strategic alignment, and cultural change.

Emerging Technologies

• Emerging technologies include both cutting-edge (e.g., quantum computing, 5G, digital twins) and long-standing (e.g., operational technology).
• These technologies are increasingly connected to the internet, creating new security challenges.
• Security, data privacy, and compliance are the top drivers for adoption of emerging technologies in the next three years.

Ethical Data Use

• Privacy by Design: Organizations must consider privacy and security from the outset of any customer-facing project.
• Data Collection Balance: 91% of CMOs believe their organizations balance data collection with trust.
• Customer Trust: High trust correlates with repeat business and strong social media support.
• Ethics Over Regulation: Customers are increasingly concerned about how their data is used and are using purchasing power to support ethical practices.

Conclusion

The report concludes that the future of cybersecurity is about embedding it into the core of business strategies, culture, and technology ecosystems. It emphasizes the importance of Zero Trust as a foundational principle, the need for cross-functional collaboration, and the role of leadership in driving change. Organizations that proactively address these challenges will be better positioned to thrive in an increasingly complex and interconnected digital world.