埃森哲-保护数字经济报告（英文）-2019.3-49页_1mb

Summary of "Securing the Digital Economy"

Core Content

This document outlines the challenges and opportunities for CEOs to secure the digital economy by addressing both the above-ground (business strategies) and below-ground (technological infrastructure) aspects of Internet security. It emphasizes the need for a holistic approach to cybersecurity, integrating governance, business architecture, and technology improvements to build a trustworthy digital economy.

Main Points and Key Information

1. Trust as the Foundation of the Digital Economy

• Trust is the ultimate currency in the digital economy.
• The Internet's original design focused on communication and information sharing, not security.
• Insecurity risks include vulnerabilities from IoT, identity management, and data integrity.
• Lack of trust can undermine the digital economy's growth and innovation.

2. The Internet's Inherent Limitations

• The Internet has outgrown its original purpose, leading to increased complexity and connectivity.
• Base protocols such as BGP, DNS, and PKI are outdated and insecure.
• Cyberattacks can have cascading effects, as seen in the 2017 NotPetya and WannaCry incidents.

3. The Role of CEOs in Securing the Digital Economy

• CEOs must take a strategic and proactive role in both business initiatives and technology investments.
• Above-ground actions include:
  • Promoting industry-wide governance and ethical standards.
  • Ensuring data privacy and digital identity control.
  • Encouraging transparency in sharing cyberattack information.
• Below-ground actions include:
  • Investing in upgraded Internet infrastructure.
  • Supporting innovative technology solutions to enhance security.
  • Applying security principles to business models and value chains.

4. The Impact of Digital Fragmentation

• Digital fragmentation is increasing due to regulatory restrictions on data flow.
• Walled gardens are becoming more common, which could stunt global economic growth.
• Geopolitical tensions and cybersecurity concerns are driving further fragmentation.

5. The Cost of Insecurity

• The economic cost of insecurity is significant, with $5.2 trillion at risk in the next five years.
• High-tech industries are particularly vulnerable, with $753 billion at stake.
• Cybersecurity spending is expected to grow from $123 billion in 2018 to $170.5 billion by 2022.

6. The Need for a New Vision

• 61% of CEOs believe the security issues are too large for their organizations to handle alone.
• 86% think that collaboration among industry peers is essential for improving resilience.
• A new vision for the Internet is needed to address the growing complexity and threats.

Key Recommendations for CEOs

• Develop and promote ethical codes of conduct for software professionals.
• Collaborate globally with other companies, governments, and regulators to establish principle-based standards.
• Embed trust into business models and value chains.
• Share information about cyberattacks to build transparency and reduce stigma.
• Invest in technology upgrades to improve Internet infrastructure and protocols.
• Support secure digital identity systems, whether centralized (e.g., Estonia) or decentralized (e.g., blockchain).

Conclusion

Securing the digital economy requires decisive and unconventional leadership from the C-suite. CEOs must recognize that trust and security are not just technical issues but strategic imperatives. By taking a dual approach—above-ground through governance and business strategies, and below-ground through technological innovation—CEOs can help reinvent the Internet for a more secure and trustworthy digital economy.