Business Cyber Security Spending In 2021

Organisations today are fending off cyber risks of all types, from malware to social engineering and malicious insiders. The onset of Coronavirus, which has pushed many employees out of the office to work remotely, has also resulted in a boom in hostile digital equivalents. Furthermore, the lockdown for Covid-19 has seen companies become more reliant on decentralised digital operation systems than ever before, something many do not have the talent and other resources for. Many are more exposed to cyber attacks than ever before. 

Experts are unanimous that organisations are likely to be targeted by hackers as they seek to exploit the chaos of the on-going crisis. Yet according to a new study from PWC, more than one-fifth of British organisations are planning to downsize their cyber team in the coming 12 months.

Amid the increasing sophistication of cyber criminals, and the rapid shift to digital technologies brought about by the Coronavirus, PWC has launched its latest insights into what’s changing and what’s next in cyber security. 

Based on a survey of 3,249 business and technology executives from around the world, including 265 in the UK, IoT and cloud service providers top the list of ‘very likely’ threat vectors in the coming 12 months were mentioned by 33%, while cyber attacks on cloud services were found to be the most likely threats to have a significantly negative impact, as noted by 24% of those polled.

UK respondents were even more pessimistic on the situation, with 58% citing an attack on cloud services, followed by a disruption-ware attack on critical business services at 52%, and a ransomware attack at 50%. 

Around 40% of executives in the global survey planned to increase resilience testing to ensure that, if a disruptive cyber event occurs, their critical business functions will stay up and running, but 96% of UK respondents said that they will shift their cyber security strategy due to Covid-19.

Overall, cyber security budgets are increasing in 2021, with 55% of those polled said they were increasing their spending in the area in 2021, even as 64% of executives expect business revenues to decline and if that forecast is accurate and the economic conditions don't recover, a cyber breach could be the death of many firms.

Such is the dire situation at many firms that more than 25% of respondents will be downsizing their spending, leaving cyber teams to do more with less. A further 13% will have to make do with static budgets.

In the UK,  PwC found that the majority of organisations lack confidence in their cyber spend, indicating that there could be trouble ahead for cyber teams when cost cutting programmes are needed. Just 36% of UK respondents are very confident they are getting the best return on their cyber spend versus 42% globally, and while a higher than average 56% of UK respondents are planning to increase their cyber budgets in 2021, this might well fall depending on just how bad things get for the British economy in its first year outside of the European Union.

The increased overall spending on cybersecurity includes ramped up recruitment for personnel over the coming year. According to PwC, 51% of executives plan to add full-time cyber security personnel over the next year. 

Globally, top roles which will be in demand relate to cloud solutions, which as mentioned is a major area of concern at present, at 43%, security intelligence at 40%, and data analysis at 37%. UK respondents seem much more reserved when it comes to hiring. Just 42% of UK respondents said they plan to increase their headcount, and 22% of UK organisations are actually planning to decrease the size of their cyber security team, compared to 16% globally.

Cyber security has been a growing  priority for businesses and many of them have moved fast to ensure they have strong protections in place. Multi-factor-authentication has become the norm across businesses of all sizes, many companies have started offering security awareness training and the rise of AI systems will have enabled some companies to autonomously defend workforces.

Gartner estimates that worldwide security spending grew 10.5% in 2019, compared to 0.4% growth in IT spending overall.

Most businesses had already identified holes in their practices, leading some to be more diligent in response to cyber security threats. Commenting on the survey Richard Horne, Cyber Security Chair, PwC said, “It's surprising that so many organisations lack confidence in their cyber security spend. It shows businesses need to improve their understanding of cyber threats and the vulnerabilities they exploit, while changing the way they think about cyber risk so, it becomes an intrinsic part of every business decision.” 

As cyber criminals find a new opportunity for attack with remote workers and improperly secured connections and technologies. Together, these trends have created a more vulnerable environment affecting the cyber security of many organisations. 

No organisation can be totally protected from cyber attacks and  it is therefore  vital that they each build an effective cyber security strategy and an implemented tactical plan that are continually up-dated and effectively used. 

PWC:      ITPro:       Techrepublic:     Computing:        Consultancy UK:     Consultancy UK:     Infosec Institute:

Please contact Cyber Security Intelligence for more information and recommendations on effective training for cyber security.

You Might Also Read:

Critical Cyber Security Threats & Solutions For Business:

 

« Europol Warning Of The Growing AI Cyber Threat
Russian Hackers Have Stolen US Secrets »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

DoSarrest Internet Security Ltd

DoSarrest Internet Security Ltd

DOSarrest is a fully managed security firm specializing in cloud based DDoS protection services to a worldwide client base.

Cyber Technology Institute - De Montfort University

Cyber Technology Institute - De Montfort University

The Cyber Technology Institute provides training and high quality research and consultancy services in the fields of cyber security, software engineering and digital forensics.

Australian Information Security Association (AISA)

Australian Information Security Association (AISA)

AISA champions the development of a robust information security sector by building professional capacity and advancing the cyber security of the public, business and governments in Australia.

NNIT

NNIT

NNIT​ is one of Denmark’s leading consultancies in IT development, implementation and operations, including cyber security.

Duo Security

Duo Security

Duo combines security expertise with a user-centered philosophy to provide two-factor authentication, endpoint remediation and secure single sign-on tools.

Boldon James

Boldon James

Boldon James are market leaders in data classification and secure messaging software.

Halon

Halon

Halon is a flexible security and operations platform for in-transit email.

Calero Software

Calero Software

Calero is a leading global provider of Communications and Cloud Lifecycle Management (CLM) solutions designed to simplify the management of voice, mobile and other unified communications services.

Knowledge Transfer Network (KTN)

Knowledge Transfer Network (KTN)

KTN links new ideas and opportunities with expertise, markets and finance through our network of businesses, universities, funders and investors.

Munich Re

Munich Re

Munich Re is a leading global provider of reinsurance, primary insurance and insurance-related risk solutions including Cyber.

Ironhack

Ironhack

Ironhack provide intensive training courses & bootcamps in Web Development, UX/UI Design, Data Analytics & Cybersecurity.

Opticks Security

Opticks Security

Opticks provides fraud detection and monitoring solutions for leading brands. agencies and networks. Our relentless mission is to deliver reliable and innovative software to beat digital fraud.

PhishProtection

PhishProtection

We created Phish Protection to prevent all types of phishing including spear phishing protection and office 365 email protection for your small business.

Cranium

Cranium

AI is being implemented into every business process, but nobody knows whether their AI is secure. Our mission is to deliver security and trust to the AI revolution.

ActiveFence

ActiveFence

ActiveFence enables Trust & Safety teams to be proactive about online integrity so they can keep their users safe from online harm – across content formats, languages, and abuse areas.

BetterWorld Technology

BetterWorld Technology

BetterWorld Technology provides cloud solutions, managed services, SaaS, cybersecurity and virtual CIO, all customized to meet your needs.