People biggest threat to information security – PwC Report
PwC’s Global State of Information Security Survey finds that staff, service providers, suppliers or business partners, are rated among the biggest cyber risks for Kiwi
companies.
29.6% of respondents said that current staff were responsible for cyber attacks in New Zealand.
“The ‘unknown hacker’ was picked as the largest category responsible for cyber attacks and that’s because attribution is
difficult and most companies end up not knowing where or who the attackers are. However, it became clear that people
known to the company were also among the biggest threats,” says Adrian van Hest, PwC Partner and Cyber Practice Leader.
“We’ve seen that the amount being invested in cyber security is increasing, but the number and cost of incidents are
also increasing. So while there’s continued spending, it doesn't mean that the investments are effective or that they’re
being spent on the right things.”
New business models present different cyber risks. The ongoing uptake of cloud computing and reliance on mobile devices
brings new risks – not because the technologies are not safe, but because they require companies to take a different
approach to the way they manage cyber security.
“We’ve also found that investment in identity management is growing faster overseas because they’re experiencing more
cyber incidents through increased cloud usage. Kiwi companies are slightly behind the trend as most of our cyber
incidents still seem to occur because of outdated software. However, as more businesses move to the cloud, it’s only a
matter of time before we face the same risks,” says Adrian.
The report concludes that cyber security is no longer just an issue for IT departments - it’s an issue that cuts across
our entire digital society. Companies that stay competitive in our digital landscape can’t blindly trust that their
businesses and customer data will stay secure. Building and maintaining trust is going to be the greatest differentiator
for New Zealand businesses in our digital society and now’s the time to start taking that seriously.
ENDS
Notes
PwC's Global State of Information Security Survey is now in its 19th year globally, surveying almost 10,000 cyber security and IT leaders from around the world.
The New Zealand Global State of Information Security Survey 2018 draws on the insights of 62 of New Zealand's top cyber security professionals, who took part in the survey in May 2017.
About PwC
At PwC, our purpose is to build trust in society and solve important problems. PwC is a network of firms in 157 countries with
more than 223,000 people who are committed to delivering quality in assurance, advisory and tax services. Find out more
and tell us what matters to you by visiting us at www.pwc.co.nz
PwC refers to the New Zealand member firm, and may sometimes refer to the PwC network. Each member firm is a separate
legal entity. Please see www.pwc.com/structure for further details.