03

BUSINESS CONTINUITY & INCIDENT RESPONSE

Consumer businesses are leveraging innovative technologies to help enhance the customer experience, build loyalty, and remain competitive in a digital world. However, companies should consider balancing their expanding digital footprints with a growing focus on cyber risk. Emerging technologies are often attractive avenues of opportunity for cyber criminals looking to expose weaknesses in an organization’s digital ecosystem.

New technologies, new challenges, new risks

Innovations and new technologies make it possible to create tailor-made products and services accessible to every customer at any time. Widespread initiatives around customer analytics, cloud integration, connected devices, and digital payment technology are gaining momentum and offer solutions to run smoother operations. But they are also likely leaving businesses increasingly exposed to cyber threats.

Six major challenges

Consumer businesses face numerous challenges as they attempt to handle the complex issues of cyber risk. Deloitte have identified the following six themes that companies should consider:

• ●
• Customer trust: Businesses should not only consider how perceptions of uncertainty about the privacy of personal information may impact future purchase decisions but also assure their customers that they are taking appropriate steps to mitigate cyber risk.
• ●
  Connected products: The rapid growth of connected products not only presents numerous potential benefits to consumer businesses and their customers but can also increase cyber risk. It is essential that consumer businesses ensure the security of connected products if both businesses and consumers are to reap their benefits.
• ●
  Payments: Companies that are able to leverage emerging payment technologies while maintaining a focus on the security of these platforms will be positioned to gain from their implementation. Technologies such as emerging payment systems that provide new and efficient customer experiences are also being targeted by cyber criminals.
• ●
  Intellectual property: Intellectual property (IP) drives a company’s innovation, competitiveness, and growth. The evolving nature and rising incidence of IP theft require a comprehensive cyber risk approach around identity and data access management. 
• ●
  Talent and human capital: An organization’s ability to effectively and efficiently manage cyber risk should be part of its culture. Talent can be the weakest link in the cyber landscape. In order to mitigate this risk, it is imperative to attract, train, and retain top cyber talent.

04

CYBER SECURITY POLICY, CYBER SIMULATIONS & AWARENESS TRAININGS

Phishing emails, spyware, hacking and data theft have become a natural part of our digital everyday lives. Make your employees the best protection against cyber threats through cyber awareness training.

Challenges

How do we effectively make our employees the best protection against cyber threats?

Up to 90% of all cyber incidents are caused by human action. Companies should therefore pay more attention to the cybersecurity hygiene of their employees. In this context, education and training is a cost-effective way to lower your risk of experiencing a cyber incident. Still, to fully anchor a good cybersecurity culture combined with a high level of cyber awareness can be difficult for the following reasons: 

• ●
• Lack of motivation and understanding of value and purpose;
• ●
  Lack of real-life examples – employees cannot relate to training materials; and
• ●
  Difficult and time-consuming leads to cyber awareness training being downgraded on the company agenda. 
  

Our approach

Deloitte offers cyber awareness training and education that ensures that your organization is at their best when it comes to being aware of potential cyberattacks.

Deloitte's Awareness platform and the surrounding awareness program model activities are designed to give the employees a greater awareness and knowledge of the role they play in relation to IT security, thereby raising general security to a higher level. To make the awareness training as effective as possible, we work from a desire to create a deep understanding of your organization and culture. This understanding helps to implement the right elements where they create the greatest value.

We recognize that awareness programs need to be measurable, and follow-up campaigns initiated according to best practice. In our view, awareness training must create synergies between products, behavior and culture to fully anchor cybersecurity as a culture. Our approach is divided into three phases: