Deloitte report outlines top threats for seven industries, provides tips to understand greatest risk

New York, 26 June 2014— Today’s C-suite must deploy a cyber-defense that is secure, vigilant, and resilient, according to a report released today by Deloitte Touche Tohmatsu Limited (Deloitte Global). The report, Global Cyber Executive Briefing, finds that virtually all organizations will be attacked so C-level executives need to better understand their biggest threats and which assets— typically those at the heart of their business’s mission— are at the greatest risk.

This report examines threats and vulnerabilities across seven key sectors: high technology, online media, telecommunications, e-commerce, insurance, manufacturing, and retail. It outlines potential for attacks, reasons and possible scenarios, and potential impact to business.

“People think cyber-attacks are confined to specific sectors. In reality though, any organization that has valuable data is at risk,” said Ted DeZabala, Cyber Risk Services Leader, Deloitte Global. “Not a single sector is immune to this. Knowing the value of your data, the value of that data over time, knowing the potential attacker, their resources and motivation, are some of the first steps in making business decisions about adequate protection.”

According to the report, being secure starts with tackling weaknesses in applications and reinforcing the digital infrastructure. Organizations that are vigilant should subsequently be alert and identify any attacks as early as possible. Being resilient involves early-stage identification of the direction of a threat, the reason for such threat and how it will manifest itself. Rapidly detecting an attack can spur an organization into action so it isolates and removes the threat.

Highlights of the report, including threats by sector, include:

• High Tech: Consistently a target for attacks with the biggest threats being loss of intellectual property (IP) and hacktivism. Threats are also used as a stepping stone to attack and infect others.
• Online Media: Has the greatest exposure to cyber-threats with ones that cause reputational damage topping the list. Threats are also used as a stepping stone to attack and infect others.
• Telecommunications: Facing increased, sophisticated attacks, including by Government agencies using Advanced Persistent Threats (APT) to establish covert surveillance for long periods of time. Another critical threat unique to the telecommunications sector is the attack of leased infrastructure equipment, such as home routers from Internet Service Providers (ISPs).
• eCommerce: Database breach (i.e. loss of customer data, including names, physical addresses, phone) and online payment systems are vulnerable areas often attacked. Denial-of-service attacks also top the list, particularly by hacktivists that want to disrupt an organization in a highly visible way.
• Insurance: The sector typically has a lot of sensitive data to protect. Cyber-attacks are growing exponentially as insurance companies migrate toward digital channels with sophisticated attacks combing advanced malware with other techniques such as social engineering. While current attacks appear short-term, the report predicts the number of long-term attacks may be silently growing.
• Manufacturing: Increasing in the amount of attacks by hackers and cyber-criminals as well as through corporate espionage. Types of cyber-attacks in manufacturing vary widely from Phishing to Advanced Malware, targeting not only IT but also connected Industrial Control Systems.
• Retail: Credit card data is the new currency for hackers and criminals. Insider threats in retail are is increasing, giving rise to a new breed of criminals that focus on stealing information -- especially the valuable cardholder data that flows between consumers and retailers.

About Deloitte

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee, and its network of member firms, each of which is a legally separate and independent entity. Please see www.deloitte.com/about for a detailed description of the legal structure of Deloitte Touche Tohmatsu Limited and its member firms.

Deloitte provides audit, tax, consulting, and financial advisory services to public and private clients spanning multiple industries. With a globally connected network of member firms in more than 150 countries, Deloitte brings world-class capabilities and high-quality service to clients, delivering the insights they need to address their most complex business challenges. Deloitte has in the region of 200,000 professionals, all committed to becoming the standard of excellence.