{"id":89824,"date":"2019-09-18T09:00:50","date_gmt":"2019-09-18T16:00:50","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/\/?p=89824"},"modified":"2023-05-15T23:07:43","modified_gmt":"2023-05-16T06:07:43","slug":"marsh-microsoft-2019-global-cyber-risk-perception-survey-results","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2019\/09\/18\/marsh-microsoft-2019-global-cyber-risk-perception-survey-results\/","title":{"rendered":"Overview of the Marsh-Microsoft 2019 Global Cyber Risk Perception survey results"},"content":{"rendered":"
Technology is dramatically transforming the global business environment, with continual advances in areas ranging from artificial intelligence (AI)<\/a> and the Internet of Things (IoT)<\/a> to data availability and blockchain. The speed at which digital technologies evolve and disrupt traditional business models keeps increasing. At the same time, cyber risks seem to evolve even faster\u2014moving beyond data breaches and privacy concerns to sophisticated schemes that can disrupt entire businesses, industries, supply chains<\/a>, and nations\u2014costing the economy billions of dollars and affecting companies in every sector.<\/p>\n The hard truth organizations must face is that cyber risk can be mitigated and managed\u2014but it cannot be eliminated. Results from the 2019 Marsh-Microsoft Global Cyber Risk Perception survey<\/a> reveal several encouraging signs of improvement in the way that organizations view and manage cyber risk. Now that cyber risk is clearly and firmly at the top of corporate risk agendas, we see a positive shift towards the adoption of more rigorous, comprehensive cyber risk management in many areas. However, many organizations still struggle with how to best articulate, approach, and act upon cyber risk within their overall enterprise risk framework\u2014even as the tide of technological change brings new and unanticipated cyber risk complexity.<\/p>\n While companies see cyber events as a top priority, confidence in cyber resilience is declining. Cyber risk became even more firmly entrenched as an organizational priority in the past two years. Yet at the same time, organizations\u2019 confidence in their ability to manage the risk declined.<\/p>\n Technology innovation is vital to most businesses, but often adds to the complexity of an organization\u2019s technology footprint, including its cyber risk.<\/p>\n The increasing interdependence and digitization of supply chains brings increased cyber risk to all parties, but many firms perceive the risks as one-sided.<\/p>\n Organizations generally see government regulation and industry standards as having limited effectiveness in helping manage cyber risk\u2014with the notable exception of nation-state attacks.<\/p>\n Many organizations focus on technology defenses and investments to prevent cyber risk, to the neglect of assessment, risk transfer, response planning, and other risk management areas that build cyber resilience.<\/p>\n Cyber insurance coverage is expanding to meet evolving threats, and attitudes toward policies are also shifting.<\/p>\n At a practical level, this year\u2019s survey points to a number of best practices that the most cyber resilient firms employ and which all firms should consider adopting:<\/p>\n Despite the decline in organizational confidence in the ability to manage cyber risk, we\u2019re optimistic that more organizations are now clearly recognizing the critical nature of the threat and beginning to\u00a0seek out and embrace best practices.<\/p>\n Effective cyber risk management requires a comprehensive approach employing risk assessment, measurement, mitigation, transfer, and planning, and the optimal program will depend on each company\u2019s unique risk profile and tolerance.<\/p>\n Still, these recommendations address many of the common and most urgent aspects of cyber risk that organizations today are challenged with; as such, they should be viewed as signposts along the path to building true cyber resilience.<\/p>\n Read the full 2019 Marsh-Microsoft Global Cyber Risk Perception survey<\/a> or find additional report content on Marsh’s website<\/a>. Bookmark the Security blog<\/a> to keep up with our expert coverage on security matters. Also, follow us at @MSFTSecurity<\/a> for the latest news and updates on cybersecurity.<\/p>\n","protected":false},"excerpt":{"rendered":" Results from the 2019 Marsh-Microsoft Global Cyber Risk Perception survey reveal several encouraging signs of improvement in the way organizations view and manage cyber risk.<\/p>\n","protected":false},"author":96,"featured_media":89825,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ms_queue_id":[],"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","footnotes":""},"content-type":[3662],"topic":[3674,3681],"products":[],"threat-intelligence":[],"tags":[3753,3822],"coauthors":[1896],"class_list":["post-89824","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","content-type-news","topic-incident-response","topic-risk-management","tag-cybersecurity-policy","tag-microsoft-security-insights"],"yoast_head":"\nHighlights from the survey<\/h3>\n
\n
\n
New technology brings increased cyber exposure<\/h3>\n
\n
Increasing interdependent digital supply chains brings new cyber risks<\/h3>\n
\n
Appetite for government role in managing cyber risks draws mixed views<\/h3>\n
\n
\n
Cyber investments focus on prevention, not resilience<\/h3>\n
\n
Cyber insurance<\/h3>\n
\n
Key takeaways<\/h3>\n
\n
Learn more<\/h3>\n