IT Brief New Zealand logo
Technology news for New Zealand's largest enterprises
Partner content
Story image

'Cyber Champions' best placed in the balance of cyber resilience and business strategy - Accenture report

By Sara Barker
Tue 23 Nov 2021

A new report from Accenture has classified organisations' cyber resilience in four categories, with 'Cyber Champions' leading the way.

The State of Cybersecurity Resilience 2021 report, which is based on feedback from 4,744 organisations worldwide, examines the state of cybersecurity and how they balance business strategy with cyber resilience.

Globally, 81% of respondents say that the cost of staying ahead of attackers is unsustainable, up from 69% the previous year. In addition, more than 80% say their security budgets have increased in the last year, now accounting for up to 15% of IT spend.

Additionally, respondents report a 32% rise in the number of successful cyber attacks. Supply chain attacks have had a notable impact this year - 61% say they have been breached through this attack vector, up from 44% the previous year.

In Australia, the research finds that Australian organisations actually spend even less than the global average of their IT budgets on security. Most concerningly, it took a global average of 22% of businesses less than one day to detect and respond to a successful breach, compared to only 8% of Australian organisations. The time it took the majority of Australian businesses (66%) to detect a successful breach was between 1-7 days.

Accenture A/NZ cybersecurity lead Mark Sayer comments, "As organisations are waking up to the reality of how dependent they are on technology, they are realising that cybersecurity has become a material risk and is now a whole-of-business responsibility. The rapid adoption of new and emerging technologies, while providing businesses with immense opportunities to scale and innovate, is also creating new opportunities for cybercriminals to profit.

"In saying that, is not realistic or sustainable for organisations to continue increasing their spend on security, especially if it isn't aligned to the business or actually making the organisation safer. As the cyber security landscape becomes increasingly complex, we need to think differently and more creatively about how we sustain the security of our technology platforms. As a start, chief information security officers need to look beyond their security-focused silo and collaborate closely with the right executives in their organisation to gain a 360-degree view of the business risks and priorities, and ensure that key security controls and investment priorities are aligned."

The report also presents a 'cyber quadrant', which categorises organisations into four types based on the relationship between their cyber resilience and business strategy alignment. These types include Cyber Champions, Business Blockers, Cyber Risk Takers, and The Vulnerable.

Cyber Champions: Organisations in this quadrant can balance cyber resilience and business objectives, aligning to business strategy. They are best at protecting key assets.

They may have more business unit leads who are responsible for cybersecurity than organisations in the other three quadrants, and they also have an extra edge - around 4% of Cyber Champions lose more than 500,000 data records. 

They may also block 8% more breaches than their counterparts within the Business Blocker quadrant, and they block 36% more breaches than Cyber Risk Takers.

Business Blockers: These organisations prioritise cyber resilience over business strategy alignment. This is sometimes seen as an 'impediment' to business objectives, and organisations in this quadrant do not have 'Cyber Champions'.

Twenty-five percent of Business Blockers are likely to encounter an attack that results in a breach. While they still experience fewer breaches than Cyber Risk Takers and the Vulnerable, they are twice as likely to experience a high-profile, severe, or long term impact on their business in the event of a significant attack.

Organisations in this quadrant also have the highest proportion (32%) of CISOs that have the ability to approve budgets compared to other quadrants, meaning they may increase focus more on security than business strategy.  21% of Cyber Champions, 21% of Cyber Risk Takers, and 16% of The Vulnerable also have CISOs who can approve budgets.

Cyber Risk Takers: Business growth is a priority, so they accept higher cyber risk and are most aligned with their business strategy. Their priorities include business growth, cost reduction, customer satisfaction, development, exploring new markets, market share, time to market, and user experience.

According to the report, 53% of Cyber Risk Takers experienced an attack that led to a breach, and 23% of these attacks resulted in significant damage.

The report notes that while Cyber Risk Takers have a high security budget, that doesn't necessarily mean they have more cyber resilience. 

The Vulnerable: These organisations often have immature cybersecurity operations, secure the bare minimum, and security is not aligned with business strategy.

The report states that there are three key steps organisations can take to become a Cyber Champion: 

1. Give CISOs a seat at the top table: By drawing on the experience and insights of the wider leadership team, CISOs can gain a broader perspective that serves the whole business well. 
2. Be threat-centric and business-aligned: Security leaders must closely align with the business as partners in driving down risk. This alignment helps to embed security into business priorities.
3. Get the most out of secure cloud: Organisations should seize the opportunity to reset their security posture earlier and more effectively to the cloud like Cyber Champions do.

Read the full report here.

Related stories
Top stories
Story image
Tech job moves
Tech job moves - Cohesity, Equinix, IDC, Proofpoint & Xero
We round up all job appointments from July 29 - August 5, 2022, in one place to keep you updated with the latest from across the tech industries.
Story image
DCI Data Centers breaks ground on AKL02 center
DCI Data Centers has commenced construction on Auckland's largest data center.
Story image
10 Minute IT Jams
Video: 10 Minute IT Jams - An update from Heidrick & Struggles
Graham Kittle joins us today to discuss how the company is helping organisations bring about change within their business.
Story image
Exclusive: UKG brings a people focused approach to workforce management
Managing an effective and efficient workforce is the crux of any business operation, and in today's climate, it's more than just work employers need to be aware of.
Story image
Exclusive: Inde provides innovative solutions across the tech sector
Inde likes to call its approach the 'power of the collective', which essentially means that if a client approaches the company with a problem, they'll get the team's collective insight to help drive the best outcome.
Story image
Fortinet reports second quarter 2022 financial results
“We delivered strong revenue and billings growth in the second quarter driven by an increase in the number of transactions larger than one million dollars."
Story image
MyRepublic unveils 'choose the speed you need' mobile plans
Broadband provider MyRepublic has announced the details of its new 'choose the speed you need' mobile plans, designed for New Zealanders. 
Story image
SaaS sector in NZ thriving as a result of trans -Tasman partnerships
New Zealand's Software-as-a-Service (SaaS) sector is on track to be the biggest contributor to GDP this year, generating more than NZD$20 billion for the New Zealand economy.
AWS Marketplace
Learn how security orchestration, automation, and response (SOAR) enhances your security strategy.
Link image
Story image
ManageEngine unveils SaaS availability of Analytics Plus
ManageEngine's Analytics Plus is now available as a software as a service (SaaS) offering, enabling users to set up a completely functional and integrated analytics platform anywhere in under a minute.
Story image
Microsoft unveils two new security products to help reduce attack surfaces
The products are set to give companies deeper insights into threat actor activity and help them successfully navigate the changing threat landscape.
Story image
Qualys develops EASM capabilities for Cloud Platform
"Qualys unique approach to EASM is integrating the internal and external asset data from CyberSecurity Attack Management with its VMDR solution into a single view."
Story image
Why the Metaverse could be the key to enhancing the healthcare sector
The experts at Accenture understand that the programmable world is about building the next version of the physical world in healthcare, understanding complex layers in order to fully utilise technology to its maximum effect.
Story image
Robotic Process Automation / RPA
Gartner anticipates RPA software revenue of US$2.9 billion
Gartner predicts global robotic process automation (RPA) software revenue to reach US$2.9 billion in 2022, an increase of 19.5% from 2021.
Story image
Ivanti and SentinelOne partner on patch management solution
Ivanti and SentinelOne will integrate their technologies Ivanti Neurons for Patch Management and SentinelOne's Singularity XDR platform.
Story image
10 Minute IT Jams
Video: 10 Minute IT Jams - An update from Talend
Stu Garrow joins us today to discuss the company’s key solutions, and how they can help organisations thrive in the data management space.
Story image
Veeam named Leader in enterprise backup and recovery
"We believe our innovation and ability to execute validates our solid standing as the #1 trusted provider of modern data protection."
Story image
Data Protection
CyberRes partners with Google Cloud in lead up to BigQuery release
CyberRes, a Micro Focus line of business, has announced a partnership with Google Cloud to support the upcoming release of BigQuery remote functions.
Story image
Visa launches Eco Benefits solutions in Australia and NZ
Eco Benefits is a suite of sustainability-focused solutions that will help Visa cardholders better understand the environmental impact of their payments.
Story image
Data Protection
Video: 10 Minute IT Jams - An update from SearchInform
Alexey Pinchuk joins us today to discuss the role the company plays in helping organisations manage risk and provide better security outcomes.
Story image
Chorus announces Hyperfibre sponsorship deal with NZ Esports
Chorus has put its support behind New Zealand's Esports community with a newly announced three-year Hyperfibre sponsorship deal with NZ Esports.
Story image
Why enhancing bot protection for web and API endpoints matters
The trouble with bots is that they aren’t all bad. Unfortunately, this can make it challenging to detect malicious bots that find their way into your system and threaten your business.
Story image
Remote Working
Four-day week: Perceptions across Asia Pacific and Japan
Workers across APJ want to be empowered to do their best work, wherever and whenever they want.
Story image
Gartner names Rubrik Leader in 2022 Magic Quadrant
Rubrik has been positioned by Gartner as a Leader in the 2022 Magic Quadrant for Enterprise Backup and Recovery Software Solutions.
Story image
More than a fifth of cybersecurity teams ban the use of public WiFi
Verizon’s fifth annual Mobile Security Index report has revealed a continued rise in significant cyberattacks in the last year involving a mobile/IoT device.
Story image
Security gaps in APIs plague organisations - study
Together, the findings highlight that existing solutions and API security tactics focused on shift-left strategies are failing to adequately protect APIs.
Story image
Financial results
Facebook NZ financial report reveals notable revenue increase
Revenue from contracts with customers increased by $NZD 1,089,292 compared to 2020's figures.
Story image
Enterprise Resource Planning / ERP
Why the right ERP (and partner) is crucial to an innovative and successful business
Enterprise Resource Planning (ERP) is a foundational step to ensuring a robust business model; here's why choosing the right one could be vital to ensuring long-term success and innovative results.
Story image
NOVATION releases cloud-based solution to maximise value of data
NOVATION has announced the release of DataVio, its cloud-based solution for helping businesses automate the processing and extraction of data.
Story image
Google NZ numbers show strong comprehensive profit increase
The latest financial report from Google New Zealand Limited has revealed an increase in total comprehensive profit of over $NZD 7 million.
Story image
SOTI research explores professional's thoughts on digitisation in the healthcare sector
Interconnectivity, automation and data management were the three key trends highlighted in the report as integral parts of successful medical technology implementation.
Story image
Hazelcast launches beta release of new serverless offering
Hazelcast Viridian Serverless speeds up app development, simplifies provisioning, and enables integration of real-time data into applications.
Story image
Why security needs to shape your journey to the cloud
It's estimated that 80% of workloads could be in the cloud in the next few years. How can you make all that data secure?
Story image
Data center
Macquarie Asset Management acquires stake in ST Telemedias VIRTUS Data Centres
"We will further strengthen VIRTUS' focus on sustainability by backing investment in its technology and enhancing the lifecycle management of its equipment."
Story image
Why is MACH architecture a new big thing in the tech world?
More and more global enterprises are considering replacing the monolithic tech stack with the best-of-breed composable stack that enables greater business agility.
Story image
Tablets & laptops
Chromebook and tablet shipments see another rapid decline for the year
According to research from Canalys PC Analysis, Chromebook and tablet shipments have fallen for the fourth quarter in a row for Q2 of 2022.
Story image
Four benefits companies can realise by transitioning to S/4HANA early
Although there is time before organisations are required to transition to a cloud-based solution, such as S/4HANA, it is beneficial to transition now. Waiting too long could complicate the process.
Story image
Hybrid Cloud
The essential guide to digital transformation by SolarWinds
Digital transformation is a buzzword thrown around all the time by companies, but what does it actually mean and why is it important? SolarWinds breaks it down.
Story image
2degrees unveils eSIM functionality for selected devices
2degrees has enabled eSIM functionality to work with a variety of Apple, Samsung and Oppo devices, including a range of iPads.
Story image
Identity and Access Management
Pitney Bowes launches rebranded management offering in A/NZ
Pitney Bowes has launched Smart Access Management (SAM), its rebranded digital visitor and contractor management offering in Australia and New Zealand.
Story image
OfficeMax NZ sees significant growth through Seismic partnership
OfficeMax New Zealand has announced it has seen a significant increase in customer and sales confidence as a result of Seismic’s digital enablement software.
Story image
FirstWave responds to SMB demand for better cybersecurity
FirstWave developed the CyberCision Open Security Management Platform to respond to SMBs 'urgent' need for comprehensive cyber protection.
Register now for the Sydney Cloud & Datacenter Convention 2022 and learn about topics ranging from digital transformation to data center sustainability.
Link image
Story image
Viavi updates Observer platform to simplify cloud monitoring
Version 18.8 simplifies cloud monitoring with data centre-like visibility, bringing two key capabilities to cloud-based applications and deployments.