The latest International Cyber Benchmarks Index™, for October 2018, is 17.8, maintaining the upward trend.
Impact of cyber attacks
The vast majority of participants agreed that a Web Application Firewall (WAF) is an essential component of their security infrastructure. This increases the survey average by three points.
Impact of AI on security of company
There is much concern about the impact of AI on company security defenses and about attackers using AI against companies.
Cyberattack fears and adoption of IPv6 protocol
Stolen data is the biggest fear when a cyberattack happens followed by loss of customer data. Just under half (48%) of organizations have already begun to adopt IPv6 and only 16% have not started.
Cyber threats ranked in order of level of concern
During August-September 2018, DDoS was the greatest concern followed closely by System compromise and then Ransomware.
How threat of attack by various vectors has changed
During August-September 2018, DDoS was most likely to be perceived as an increasing threat to organisations, followed by Social engineering – email and Generalized phishing.
How organisations’ ability to respond to threats has changed
During August-September 2018, organisations have focused most on increasing their ability to respond to DDoS, Ransomware and Targeted hacking.
How the risk of attack from various actors has changed
During August-September 2018, organisations have perceived the most likely increase in threats to be from Criminals and Unknown actors.
How threat landscape has changed
During August-September 2018, organisations have continued to perceive the threat landscape to be increasing most from the World at large and least from within their own company.
Whether respondents have ever been on the receiving end of a DDoS
46% of enterprises surveyed in October 2018 have *ever been on the receiving end of a DDoS, a higher proportion than in previous reporting periods.
* Note that the sample composition changes from wave to wave which explains why the trend for this question can be down as well as up.
Whether survey respondents outsource DDoS mitigation
49% of enterprises surveyed in October 2018 outsource their DDoS mitigation, in line with the previous reporting period, and increasing the average to 44%.
Length of time taken to initiate DDoS mitigation
In October 2018, enterprises were most likely to take between 60 seconds and 5 minutes to initiate DDoS mitigation, in line with previous reporting periods.