世界经济论坛-2022年全球网络安全展望（英）-2022.1-35页_10mb

Global Cybersecurity Outlook 2022 Summary

Core Content

The Global Cybersecurity Outlook 2022 is an insight report published by the World Economic Forum, highlighting the evolving landscape of cybersecurity and the increasing need for cyber resilience in the digital age. It outlines key trends, challenges and solutions in the field of cybersecurity, emphasizing the importance of strategic alignment, collaboration and a proactive approach to protecting digital ecosystems.

Main Points and Key Findings

1. Cybersecurity as a Strategic Priority

• Cybersecurity is not a standalone technology but a foundational system involving people, processes and technology.
• The pandemic and the shift to remote work have accelerated the need for cyber resilience.
• Cyber incidents are becoming more frequent, costly and damaging, sometimes even paralyzing critical services and infrastructure.

2. Perception and Implementation Gaps

• Cyber resilience is not yet fully integrated into business strategies:
  • 81% of cyber leaders believe digital transformation is the main driver of improved cyber resilience.
  • Only 55% of security-focused leaders agree that cyber resilience is integrated into enterprise risk management, while 92% of business executives do.
• Leadership support is critical:
  • 84% of respondents believe cyber resilience is a business priority with leadership support.
  • However, only 68% see it as a major part of their overall risk management.
• Talent shortage remains a challenge:
  • 59% of respondents say they would struggle to respond to a cyber incident due to a lack of skilled personnel.
  • Talent recruitment and retention are cited as the most challenging aspect by most respondents.

3. Emerging Cyber Threats

• Ransomware:
  • 80% of cyber leaders consider ransomware a dangerous and evolving threat to public safety.
  • 50% of respondents list ransomware as one of their greatest concerns.
  • Ransomware attacks increased by 151% in the first half of 2021.
  • The average cost of a breach is $3.6 million, with companies taking an average of 280 days to detect and respond to attacks.
• Social engineering:
  • Ranked second in cyber leaders' concerns.
• Malicious insider activity:
  • Ranked third, with malicious insiders defined as current or former employees, contractors or trusted partners who misuse their access to critical assets.

4. Cyber Resilience and the Ecosystem

• Cyber resilience is becoming a central focus:
  • Organizations are shifting from a defensive to a resilient mindset.
  • Cyber resilience involves anticipating, withstanding, recovering from and adapting to cyber threats.
• Ecosystem vulnerability:
  • SMEs are seen as a key threat to supply chains and ecosystems.
  • 88% of respondents express concern about the cyber resilience of SMEs.
• Transparency and trust:
  • Building resilience requires transparency and trust within the ecosystem.
  • Cyber leaders emphasize the importance of partnerships and information sharing to enhance security.

5. Solutions and Recommendations

• Employee training:
  • 61% of respondents consider employee cyber training as a solution to ransomware attacks.
• Offline backups:
  • 58% of respondents use offline backups as a key strategy.
• Cyber insurance:
  • 71% of respondents currently have cyber insurance.
  • 74% of confident cyber leaders carry cyber insurance, compared to 45% without.
  • Cyber insurance premiums increased by 180% in 2021 due to the rise in ransomware attacks.

6. Collaboration and Global Response

• Cybersecurity is a global issue that requires a unified and collaborative approach.
• Partnerships and information-sharing are essential for building resilient ecosystems.
• Cybercriminals are increasingly using advanced techniques and are supported by organized crime groups, making the threat more complex and harder to track.

Key Information

• Cybersecurity is a strategic issue, not just a technical one.
• Ransomware is the most pressing threat, followed by social engineering and malicious insider activity.
• SMEs are a critical vulnerability in the supply chain and ecosystem.
• Leadership alignment and clear communication between cyber and business executives are essential.
• Cyber resilience is the future of cybersecurity, focusing on preparedness, response and recovery.
• Cyber insurance is gaining traction as a tool to manage risks and support incident response.
• Global collaboration is necessary to address the evolving and complex nature of cyber threats.

Conclusion

The Global Cybersecurity Outlook 2022 underscores the urgent need for organizations to prioritize cyber resilience as a strategic business imperative. It highlights the growing frequency and sophistication of cyberattacks, the importance of leadership support and talent development, and the role of collaboration and global partnerships in securing digital ecosystems. As the world becomes more interconnected, the ability to anticipate, withstand and recover from cyber incidents will define the success of organizations and nations in the digital era.