Nine in ten organizations (91%) reported at least one cyber security incident or breach in the past year, according to Deloitte’s Global Future of Cyber​​​​​​​​​​​​2023 study, and more than a third (38%) reported six to ten incidents. The study also shows that the frequency of such incidents varies by level of cyber maturity, with organizations with lower cyber maturity experiencing more than ten incidents (21%) compared to mature organizations (13%). Organizations’ cyber concerns also vary by maturity level, with the most advanced primarily concerned about cybercriminals and terrorists, as well as cyberattacks. phishing, malware and ransomwarewhile low and medium maturity companies are more concerned about typical attacks denial of service, initiated to intentionally restrict the company’s networks, website and online resources.

In the context of these incidents, the top impact experienced by organizations is business disruption (58%), followed by loss of revenue, customer trust and negative brand impact, with 56% of respondents saying they experienced some moderate or high impact.

“Cyber ​​threats are becoming more complex every year and vary in types of attacks ransomwareis still considered one of the top threats, according to the EU cyber security agency ENISA, malware and attacks targeting supply chains to typify threats social engineering. According to the same source, the most affected areas are public administration and public institutions, digital service providers, financial services, and the general public. Organizations are increasing investments to become more mature in terms of cybersecurity, a trend that is also visible in our country and is expected to continue. But the investment must be accompanied by efforts to create an appropriate culture in organizations through awareness and communication actions on cyber security measures, cyber defense strategy planning and actions to retain specialists in this field,” he said. Andrej Ionescu, Partner-Coordinator for Deloitte Consulting and Risk Management in Romania and Head of the Local Cyber ​​Security Practice.

Organizations recognize the importance of planning to create cyber defense strategies that effectively reduce risk and drive business growth, with nearly two-thirds (62%) having an operational and strategic plan to protect against cyber threats. In this regard, very mature ones stand out, reaching a weight of 91%, according to the study. In addition, more than half of companies have annual cybersecurity training for employees (59%) and a cyber incident response plan that is updated and tested annually (58%).

In addition to planning, attracting and retaining industry experts are critical factors in creating successful cyber defense strategies, and companies are taking action, the study shows. To attract, retain and develop hired experts, organizations primarily provide access to professional development and certification programs (54%), flexible and hybrid work options (50%) and specialized career paths (45%).

The report also shows a clear link between cyber activities and a number of benefits, including trust. For organizations with a high level of cyber maturity, better brand reputation (64%) and customer and employee trust in digital tools (62%) are among the top benefits of their cybersecurity actions. At the opposite pole, companies with low cyber sophistication see significant benefits in areas such as trust in technology integrity (35%), customer trust and brand influence (31%).

The latest edition of the Deloitte Global Future of Cyber ​​survey surveyed more than 1,000 cybersecurity decision makers in 20 countries across regions including Europe, the Middle East and Africa, the Americas, and Asia Pacific. The report highlights the growing impact of cybersecurity on organizations.

Deloitte Romania’s cybersecurity team specializes in providing strategic servicesincluding cyber crisis simulation and type assessment exercises deep dive, defense servicesincluding identity and access control, security operations, incident preparedness and response processes and technologies, and attack servicesaimed in particular at performing penetration tests such as type exercises red harness (TIBER-EU).

The local team actively participates in the most important cyber training organized in Romania. In recent years, Deloitte Romania was one of the few private organizations selected to participate together with the Ministry of National Defense in annual exercises organized by NATO. In 2022, the Deloitte team participated in one of the largest cyber security exercises organized in Romania by the National CYBERINT Center of the Romanian Intelligence Service. In addition, local cybersecurity experts with dozens of specialized certifications offer internationally recognized courses and certifications through the Deloitte Academy, Deloitte Romania’s Professional Training Division. Deloitte is also the official authorized training center in Romania for the International Council of E-Commerce Consultants, also known as EC-Council.

For the eleventh year in a row, Gartner has recognized Deloitte as the leader in security consulting services by market share.

Deloitte provides global audit, tax and legal advisory, consulting, financial advisory and risk management services to approximately 90% of the Fortune Global 500® companies and thousands of private sector companies. The firm’s experts help deliver measurable and lasting results that help build confidence in capital markets, enabling companies to transform, thrive and pave the way for a stronger economy, a fairer society and a sustainable world. With more than 175 years of history, Deloitte covers more than 150 countries and territories. Its goal is to create a visible impact on society with the help of approximately 415,000 professionals worldwide.

Deloitte Romania is one of the largest professional firms in our country and offers in cooperation with Reff & Asociații | Deloitte Legal, audit services, tax consulting, legal services, consulting and risk management, financial consulting, service solutions and technology consulting, and other related services provided by more than 3,000 professionals.

To learn more about the global network of member firms, visit www.deloitte.com/ro/despre.