Günümüzde Siber Güvenlik : Güncel Tehditler, Yeni Yaklaşımlar

Ebat: px

Şu sayfadan göstermeyi başlat:

Download "Günümüzde Siber Güvenlik : Güncel Tehditler, Yeni Yaklaşımlar"

Erdem Çimen
7 yıl önce
İzleme sayısı:

1 Günümüzde Siber Güvenlik : Güncel Tehditler, Yeni Yaklaşımlar

2 2

3 Siber riskler sadece bir teknoloji riski mi ve şirketlerin sadece Bilgi Teknolojileri altyapısı mı tehlikede? 3

4 Target Millions of customer records stolen via a malware on POS system CEO had to step down + $1 billion Potential cost to Target Initial intrusion via a third-party HVAC company 4

5 SONY Pictures 5

6 The Global State of Information Security Survey 6

7 The survey includes 10,000 respondents from 127 countries. 30% Europe 37% North America 16% Asia Pacific 14% South America 3% Middle East & Africa 7

8 A mix of business and IT security executives are represented. 25% CEO, CFO, COO 21% CISO, CSO, CIO, CTO 9% Compliance, Risk, Privacy 25% IT & Security (Mgmt.) 20% IT & Security (Other) 8

9 Tehditler ne durumda? Siber Güvenlik 16 Aralık

10 In 2015, respondents detected 38% more information security incidents.* Small organizations reported a dramatic increase in incidents, while the number of detected compromises among large companies grew at the slowest pace. Average number of security incidents in past 12 months 6,853 2,562 2,989 3,741 4, * A security incident is defined as any adverse incident that threatens some aspect of computer security. 10

11 The financial costs of incidents more than doubled for small organizations. Small companies reported a two-fold increase in total financial losses attributed to security incidents, while large companies said losses dropped 16% in Average total financial losses due to security incidents $ $4.9 $428,471 $940,429 $1.3 $1.3 Small (Revenues less than $100 ) Medium (Revenues $100 to $1 billion) Large (Revenues more than $1 billion) 11

12 Employees remain the most cited source of compromise, but incidents attributed to business partners are up substantially. Security events ascribed to current and former third-party partners jumped 22% over the year before, while those attributed to employees inched down a notch. Estimated likely source of incidents % 34% 30% 29% 18% 22% 15% 19% 13% 16% Current employees Former employees Current service providers/ consultants/contractors Former service providers/consultants/contractors Suppliers/business partners 12

13 Increasingly, organizations report that employee, customer and internal data are primary targets of cyberattacks. While compromise of customer records rose 35%, theft of hard intellectual property like strategic business plans and financial documents increased more than any other data loss. Impact of security incidents % 33% 28% 29% 20% 26% 24% 25% 23% 15% Customer records compromised Employee records compromised Loss or damage of internal records Theft of soft intellectual property Theft of "hard" intellectual property 13

14 Peki ya önlemler? Siber Güvenlik 16 Aralık

15 Among organizations that have a CISO (54%), the security executive is most likely to report directly to the CEO. Where the CISO reports (all respondents) 36% CEO 25% CIO 23% Board of Directors 15% CTO 13% CPO 15

16 In large businesses, the security function is often organized under the CIO. CISOs of small companies are slightly more likely to report to the Board. Where the CISO reports (by company size) 37% 39% 30% 18% 24% 25% 33% 24% 22% Large CEO CIO Board Medium Small 16

17 As risks rise, organizations significantly boost investments in information security.* Reversing last year s slight drop in security spending, respondents increased their information security budgets by 24% in Information security budget for % $2.7 $2.8 $4.3 $4.1 $ of IT budget spent on information security * Information security budget refers to funds specifically and explicitly dedicated to information security, including money for hardware, software, services, education, and information security staff. 17

18 Small companies take a decisive lead in expanding spending for security programs. Small organizations doubled information security budgets in 2015, while large companies spending has remained stable. Information security budget for $10.0 $10.1 $733,052 $1.5 $2.8 $3.3 Small (Revenues less than $100 ) Medium (Revenues $100 to $1 billion) Large (Revenues more than $1 billion) 18

19 Most respondents (91%) have implemented one or more risk-based information security frameworks. A majority of organizations also say they collaborate with external industry partners to improve security and reduce risks. Adoption of risk-based security frameworks 91% 26% 28% 34% 40% 8% 18% Have not adopted a security framework Have adopted other security framework(s) Have adopted ISF Standard of Good Practice Have adopted SANS Critical Controls Have adopted NIST Cybersecurity Framework Have adopted ISO

20 Many organizations have adopted cyber security insurance, cloud-based initiatives and Big Data analytics Adoption of strategic initiatives 59% 59% 69% 56% of respondents who use cloud-based cybersecurity also employ real-time monitoring and analytics from cloud providers Cybersecurity insurance Big Data analytics Cloud-based cybersecurity 20

21 Nereden Başlamalı, Neler Yapmalı? Siber Güvenlik 16 Aralık

22 CISO

23 Cyber Security Strategy

24 Cyber Security Awareness (Staff + Execs)

25 Teşekkürler... tr.linkedin.com/in/buraks/ Türkiye. Tüm hakları saklıdır. Bu belgede ibaresi, her bir üye şirketinin ayrı birer tüzel kişilik olduğu PricewaterhouseCoopers International Limited in bir üye şirketi olan Türkiye yi ifade etmektedir. Türkiye, Başaran Nas Bağımsız Denetim ve Serbest Muhasebeci Mali Müşavirlik A.Ş., Başaran Nas Yeminli Mali Müşavirlik A.Ş. ve PricewaterhouseCoopers Danışmanlık Hizmetleri Ltd. Şti. ticari unvanları ile Türkiye de kurulmuş tüzel kişiliklerden oluşan Türkiye organizasyonunu ifade ve temsil etmektedir.

Benzer belgeler

İç Denetimin Gelişen Teknolojideki Rolü

www.pwc.com.tr/ras İç Denetimin Gelişen Teknolojideki Rolü 20 Ekim 2014 Ajanda Gelişen Teknolojiler, Yeni Riskler ve İç Denetim Bulut Bilişim Sosyal Medya Mobil Teknolojiler Siber Güvenlik Sorularınız