Post written by
Oren Falkowitz
Co-founder and CEO of Area 1 Security.
The World Economic Forum’s Global Risks Report 2018 ranks cyberattacks alongside extreme weather events and natural disasters as the most likely risks threatening the stability of society.
Roll that phrase around in your mind for a minute: One of the most likely and dangerous risks threatening the stability of society in 2018 includes cybersecurity. That means “attackers could trigger a breakdown in the systems that keep societies functioning.” In other words, we’ve moved far beyond tic-tac-toe, website defacement, stealing passwords and credit card numbers.
This is even more astonishing when you consider that, of all the global risks, cybersecurity is one of the few we have control over. If you run an ice cream shop, or a hospital, or a large multinational corporation, there isn’t much you’re going to be able to do about the next Category 5 hurricane or the Arctic melting. You’re also not in a position to do much about the increasingly likely prospect of a nuclear conflagration. But cybersecurity? You can do something about that. And that’s an important distinction.
Now, in all fairness, we haven’t been given very good tools to do that, and the cybersecurity industry as a whole has much to answer for, having sold billions of dollars of “solutions” that don’t seem to work very well. But it’s time for cybersecurity companies to be accountable to you, their customers, for the efficacy of their solutions. That’s the way the marketplace is supposed to work, and cybersecurity is a product or a service that needs to be responsive to the equilibrium of the market — the same way every other company has to be accountable for the performance of their products when they’ve been found lacking.
The resulting damage from ineffective cybersecurity is significant, with large-scale attacks becoming more commonplace as well as more damaging. Consider these statistics:
• Companies revealed breaches of more than 4 billion data records in 2016.
• The estimated annual cost of responding to cyberattacks is now $11.7 million per company, and there has been an average annual increase of 27.4% in the number of security breaches.
• More than 10% of the $3.7 billion raised in initial coin offerings (ICOs) has been stolen via phishing.