Deloitte Global 2021 Future of Cyber Survey finds rapid increase in cyberattacks driven by organizations’ embrace of digital transformation

24 November, 2021 – Amid the acceleration of digital transformation, 69% of global leaders surveyed noted a significant increase in cyberattacks at their companies this year. However, despite the elevated risk environment, leaders plan to continue to invest heavily in digital transformation—with 94% of chief financial officer (CFO) respondents looking to move their financial systems or ERP to the cloud. That’s according to a new Deloitte Global survey which reveals
that while there is no simple solution, there are a number of measures, which,
when taken together, can enable organizations to embed cyber in every aspect of their business.

Deloitte Global’s 2021 Future of Cyber Survey analyzes responses from nearly 600 global C-level executives who have visibility into the cybersecurity functions of their organizations, with the hope of increasing communication around embedding cyber into the core of every business, while providing insights on how organizations can increase visibility into complex technological ecosystems and implement best practices to better prepare for an unpredictable cyber future.

“Over the last year, businesses in the Middle East and globally have been working overtime to remain competitive amid rapid technological change as accelerated digital transformation has drastically increased organizations’ vulnerability to cyberattacks,” says Tariq Ajmal Deloitte Middle East Cyber Leader. “As the complexities of integrated environments continue to grow, leaders must prioritize incorporating cyber into every part of their business or risk the consequences of inadequate cyber protections.”

Digital transformation has heightened the need for cyber strategies
With more than half of businesses experiencing an increase in threats to their organizations throughout 2020, the risks have never been higher as the shift to remote and hybrid working becomes more common for businesses worldwide. Organizations are continuing to face challenges balancing investments in digital transformations to remain competitive while protecting their systems from potential breaches. A clear plurality of the chief information officers (CIOs) and chief information security officers (CISOs) surveyed (41%) acknowledge that transformation and gaining visibility across increasingly complex hybrid ecosystems is the greatest challenge they face. 

The wave of Zero Trust
In building a technology-forward, protected enterprise, Deloitte Global’s survey suggests the areas causing CIOs and CISOs the most significant challenge in managing cyber risk are transformation/hybrid IT (41%) and cyber hygiene (26%). As a result, companies are leveraging Zero Trust—a set of architectural guidelines that are based on the fundamental principle of “never trust, always verify”—to bridge the gap between business, IT and cyber domains reducing operational complexity and simplifying ecosystem integration. Businesses that leverage Zero Trust are leading the way in organizational change to better enable digital transformation by building security infrastructures to handle the speed of these transformations.

Investing in cyber means investing in the CISO
With hackers becoming savvier, organizations are more inclined to increase their cyber defense budgets. Among the survey respondents, almost 75% of leaders with more than US$30 billion in revenue reported they will spend more than US$100 million on cybersecurity protections this year. While these investments are being relatively evenly spread to broadly mitigate risk, we learned that greater attention is being given to threat intelligence, detection and monitoring; cyber transformation; and data security.

Over the next three years, CIOs and CISOs will continue to prioritize cyber. Respondents ranked security capabilities (64%), enhancing privacy capabilities (59%), demonstrating compliance capabilities (50%), and improving business efficiency and intelligence (45%) as the drivers for their adoption of emerging technologies.

“Despite the challenges ahead, one thing is for certain: basic, hygienic cybersecurity systems are fundamental in protecting organizations in the Middle East and globally from the rapidly increasing potential for ransomware attacks,” adds Ajmal. “Businesses that make strategic organizational, cultural, and operational changes within their organization will find success in embedding cyber into the core of their business, ultimately building future resilience.”

For more information and to view the full results of Deloitte Global’s 2021 Future of Cyber Survey, click here.

Methodology
The Deloitte 2021 Future of Cyber Survey, conducted by both Deloitte Global and Wakefield Research, polled nearly 600 C-level executives about cybersecurity at companies with at least US$500 million in annual revenue including nearly 200 CISOs, 100 CIOs, 100 CEOs, 100 CFOs, and 100 CMOs between 6 June 6 – 24 August 2021, using an online survey.

About Deloitte & Touche (M.E.) LLP:

Deloitte & Touche (M.E.) LLP (DME) is the affiliate for the territories of the Middle East and Cyprus of Deloitte NSE LLP (“NSE”), a UK limited liability partnership and member firm of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (“DTTL”).

DME is a leader in professional services with uninterrupted presence in the Middle East since 1926 with 26 offices in 14 countries and around 5,000 partners, directors and staff. DME’s presence in the Middle East and Cyprus is established through its affiliated independent legal entities, which are licensed to operate and to provide services under the applicable laws and regulations of the relevant country. DME’s affiliates and related entities cannot oblige each other and/or DME, and when providing services, each affiliate and related entity engages directly and independently with its own clients and shall only be liable for its own acts or omissions and not those of any other affiliate.

About Deloitte:

Deloitte refers to one or more of DTTL, its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities, which cannot obligate or bind each other in respect of third parties. DTTL and each DTTL member firm and related entity is liable only for its own acts and omissions, and not those of each other. DTTL, NSE and DME do not provide services to clients. Please see www.deloitte.com/about to learn more.

Deloitte is a leading global provider of audit and assurance, consulting, financial advisory, risk advisory, tax and related services. Our network of member firms in more than 150 counties and territories, serves four out of five Fortune Global 500® companies. Learn how Deloitte’s approximately 300,000 people make an impact that matters at www.deloitte.com.