Kroll, an independent provider of global risk and financial advisory solutions, today announced its report State of Incident Response: Asia Pacific. The report finds that businesses in Asia Pacific and the Philippines are feeling the impact of cyberattacks, but many are yet to build appropriate response plans or have regular access to relevant cyber expertise. One of the notable findings is that 3 out of 4 businesses in the Philippines have experienced a cyberattack, much higher than the APAC average of 59%.
Ely Tingson, Senior Vice President for Cyber Threat Intelligence Philippines, Kroll, also shared: “As we become an increasingly more digital world, our regulatory landscape is understandably still evolving to better protect data of users. What is important now is that organizations in the Philippines are also able to evolve, for example, through a virtual chief information security officer (vCISO) program and through adopting a more proactive and resilient cyber security posture by engaging in cyber threat intelligence and incident response services to efficiently and effectively mitigate potential damage.”
Overall findings of the report include:
- In response to a cyber incident, 36% of organizations in Asia Pacific did not have an incident response playbook, a plan or policies in place, 38% did not have an appointed data protection officer or access to cyber security specialists on a retainer in Asia Pacific.
- The two most cited impacts of a cyber incident were data loss (51%) and business interruption (49%).
- In order to address cybersecurity threats, the majority of organizations were planning to increase budgets (64%) and were moving to the cloud (65%).
Paul Jackson, Regional Managing Director of Asia Pacific, Cyber Risk, Kroll, said: “I am glad to see that businesses have focused on continuity and operational stability during the pandemic, but we continue to recommend that companies consider scaling up investment in cyber expertise to prepare for ‘when’ rather than ‘if’ an incident occurs. A combination of having mitigation measures brought about by considered investment in cyber security, together with a trusted cyber security advisor, will go a long way to reducing the impact of cyberattacks and enable businesses in Asia Pacific to recover more quickly. After all, the worst time to plan for an attack is during one.”
Local market variations include:
- Australia was the least likely to have an incident response plan in place, and Hong Kong was the most likely.
- Malaysia and the Philippines suffered the most incidents, while Hong Kong suffered the least.
- Data loss was a concern across the board, but those in Indonesia were also more worried than others about the reputational damage of an incident. Singaporean businesses were primarily worried about business interruption.
To understand how each market fared in the State of Incident Response: Asia Pacific report, read the full report with market breakdowns here.
The report was commissioned by Kroll and conducted by Opinium. It surveyed 700 decision-makers in IT, risk, security and legal professionals evenly split across the following Asia Pacific markets: Hong Kong, Singapore, Malaysia, Philippines, Australia, Indonesia and Japan.