Safeguarding value in the era of cyber risk

“Prepare for the expected” as cyber risk takes centre stage: Aon C-suite series report

Toronto, ON (Sept. 12, 2019) – The cyber threat is producing some alarming statistics:

• The cost of global cyber losses is predicted to reach $6 trillion annually by 2021.^[1]
• Cyber security spending will exceed $1 trillion from 2017 to 2021.^[2]

Barely a week passes without the fallout of a cyber-attack on a major corporation hitting the headlines. In July 2019, the data breach at Capital One exposed the records of almost 106 million people in the US and Canada.^[3] In Europe, Norsk Hydro was forced to halt production following a cyber-attack in March 2019, which is expected to cost the firm up to $51 million.^[4]

Organizations are starting to see the significant financial impact of non-compliance with data privacy and the General Data Protection Regulation (EU) 2016/679 (“GDPR”). The UK Information Commissioner’s Office (ICO) issued a notification of intention to impose a £183 million fine on British Airways in July 2019.^[5] In the same month, the US Federal Trade Commission (FTC) issued a $5 billion civil penalty against Facebook for violations of an earlier FTC order. The fine has been described as both “record-breaking and history-making”.^[6]

C-suite leaders are aware of these threats to their businesses, but are they fully prepared? Do they have the tools in place to deal with a cyber-attack as soon as it occurs? A cyber-incident, no matter what kind or if it makes headline news, holds the potential to have a catastrophic impact on an organisation’s balance sheet.

The C-suite are being held accountable for their actions, and plausible deniability is no longer an excuse. Boards of directors and management need to include cyber perils and solutions in corporate governance discussions, as they seek to understand and manage the financial impact of high-profile cyber-incidents.

Organizations that fail to prepare will be left in the dark on the day of a cyber-attack, facing escalating costs and irreparable reputational damage.

Download the C-suite report from Aon: Prepare for the expected: Safeguarding value in the era of cyber risk.

Notes

1. Cybersecurity Ventures: Cybersecurity Facts, Figures, Predictions, And Statistics For 2019 To 2021 (2019).

2. Ibid.

3. Capital One: Information on the Capital One Cyber Incident (2019).

4. Hydro.com: Q1 Operational and market update (2019).

5. Information Commissioner’s Office (ICO): Intention to fine British Airways £183.39m under GDPR for data breach (2019).

6. Federal Trade Commission (FTC): FTC’s $5 billion Facebook settlement: Record-breaking and history-making (2019).

About Aon

Aon plc (NYSE:AON)  is a leading global professional services firm providing a broad range of risk, retirement and health solutions. Our 50,000 colleagues in 120 countries empower results for clients by using proprietary data and analytics to deliver insights that reduce volatility and improve performance. For more information, visit www.aon.com.

© 2019 Aon plc. All rights reserved.

The information contained herein and the statements expressed are of a general nature and are not intended to address the circumstances of any particular individual or entity. Although we endeavour to provide accurate and timely information and use sources we consider reliable, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation.

The information contained in this document should not be considered or construed as legal or tax advice and is for general guidance only. Accordingly, the information contained herein is provided with the understanding that Aon, its employees and related entities are not engaged in rendering legal or tax advice. As such, this should not be used as a substitute for consultation with legal and tax counsel.

All descriptions, summaries or highlights of coverage are for general informational purposes only and do not amend, alter or modify the actual terms or conditions of any insurance policy. Coverage is governed only by the terms and conditions of the relevant policy.

This research was conducted by Longitude a Financial Times group company and part of FT Marketing Services, the FT’s commercial thought leadership offering.

Aon UK Limited is authorised and regulated by the Financial Conduct Authority.

SOURCE: Aon plc

Tags: Aon, cyber risk, data breach, report Read the original article at Insurance-Canada.ca