Zirra Market Analysis Cybersecurity Trends in Israel and New York

Total Page:16

File Type:pdf, Size:1020Kb

Zirra Market Analysis Cybersecurity Trends in Israel and New York Zirra Market Analysis Cybersecurity Trends in Israel and New York Methodology The Zirra Analysis Market Report is synthesized from many inputs, most notably the wisdom of the crowd, the output of aggregation and data collection technology, and the ratings and metrics produced by our proprietary algorithms. The report is built on external and public information on a company or companies, and provides insights and conclusions obtained from that information. None of the opinions or insights belong to any Zirra employees. All of them are grounded in the integration of a variety of sources. Some statements may sound opinionated, but these are the composite of relevant inputs and crowd opinions, vetted against similar historical situations of comparable companies. Fact We use no inside information. Information offered in the report that is usually non-public by nature, such as revenue figures, trade secrets, share structures and others, may be missing or somewhat inaccurate in the report. In some cases, such as with valuations, the numbers are generated by our algorithmic models. We do get help from industry experts. We factor their opinions into the algorithm as well as into the qualitative sections. Experts that speak on the record are usually accessible for further questions. Some experts choose to stay anonymous, and in these cases we can provide detailed logs of their contributions (that still maintain their anonymity). Mathematical figures such as ratings and valuations are based on our proprietary algorithms. The intended purpose is as a benchmark for your own process; we cannot “prove” validity of these outputs. In addition, we provide a lot of raw collected data. This is what our aggregation and collection technology has gathered and flagged as important for the company in question. We provide it as the factual basis for the synthesized statements in the report, and for you to do further analysis on if you wish. Finally, we do not recommend whether or not to invest. Our duty is to help you perform your job better. We pride ourselves on bringing transparency to our customers. Similarly, we encourage you to always be transparent, open, and candid with us. Key Benefits ● A timeline overview depicting relevant companies’ evolutions, enabling a reader to get to know the respective company in a snapshot view. ● A summary of industry trends that pertain specifically to the market and localities in question. ● Similarly derived, key insights into possible risks & success factors. Table of Contents Methodology Fact Key Benefits Background Key Findings Market Israeli Market New York Market Solution Trends and Insights Israeli Trends New York Trends Competition Israeli Startups Opportunities Risks Strategic Considerations New York Startups Opportunities Risks Strategic Considerations Multinational Companies of Note Accenture CyberArk EY Herjavec IBM Competitor Profiles BioCatch Cato Networks Cybereason Deep Instinct Illusive networks ThetaRay Claroty Flashpoint HYPR Corp Security Scorecard Situation Analysis Background The need for strong protection against cyber-attacks has never been greater, as the complexity and cost of cybercrime damage keeps increasing every year. The continued evolution of these threats results in a sustained funding flow, despite the saturation and hype in the market. Further, the space is seeing frequent and profitable M&A deals, equally attracting the attention of both investors and entrepreneurs. Israel attracts 15% of the global investment in cybersecurity. The country's cybersecurity cluster is one of the strongest in the world, with top talent being produced at the intelligence units of the IDF. While the local market is small, the competition for talent in the space is significant. New York is the financial capital of the United States and has the largest customers in financial services in the Western World. It's a gateway for business, but still developing as a cyber hub. New regulation will significantly accelerate the development of the cyber security cluster in New York. Key Findings Market MarketsandMarkets reports that the cyber security market was estimated to be worth $137.85 billion in 2017 and, growing at a CAGR of 11%, is predicted to be worth $231.94 billion by 2022. Factors facilitating this growth include the growing security needs of the Internet of Things (IoT) and Bring Your Own Device (BYOD) trends, as well as increased deployment of web and cloud- based business applications. According to Cybersecurity Ventures, cybercrime damage costs are expected to grow to $6 trillion each year by 2021, up from $3 trillion in 2015. Further, Gartner reports that worldwide spending on information security products and services will reach $86.4B in 2017, an increase of 7% over 2016, with spending expected to grow to $93B in 2018. The global cybersecurity space saw numerous venture capital and M&A deals during 2017. Financing deals hit an all-time quarterly high of 146 deals in Q1 ’17, showing a 26% increase from the previous quarterly high. Diverse companies closed three-figure rounds of funding - including SmartSky Networks ($170 million), Netskope ($100 million), Illumio ($125 million), Cybereason ($100 million), and BlueteamGlobal (over $125 million). Some of the largest M&A deals of the previous year include Micro Focus’ acquisition of HPE’s IT management, big data and security lines for $8.8 billion, Intel’s acquisition of Mobileye for $15.3 billion, Advent International’s acquisition of Morpho for $2.7 billion, DigiCert’s acquisition of Symantec’s website security and PKI solutions business for $950 million in cash and 30% of DigiCert’s common stock, Symantec’s acquisition of Fireglass in July and Gemalto’s purchase of 3M’s identity management business for $850 million. Israeli Market Israel attracts 15% of the global investment in cybersecurity. The country’s cybersecurity cluster is considered one of the strongest in the world, with top talent being produced at the intelligence units of the Israel Defense Forces. While global investment in cybersecurity startups has shown signs of stagnation in recent years, Israel – second only to the U.S. market – has remained strong and showed impressive numbers, experiencing a surge in funding and continued innovation. During the first half of 2017 Israeli cybersecurity startups raised $434 million in 28 rounds, showing a 25% increase in the total funding sum against the same period on the previous year although the number of rounds remained similar. The average round rose 7% to $15.5 million. During this same period, four startups were sold for $272 million, which represents a 160% rise in the sum of M&A deals and is a testament to the strength of the market. The majority of this sum came from the acquisitions of LightCyber by Palo Alto Networks ($130 million), and Hexadite by Microsoft ($100 million). Albeit impressive, these numbers are still far from previous M&A deals in the space such as Adallom’s acquisition by Microsoft for $320 million in 2015 and Trusteer’s acquisition by IBM for $1 billion in 2013. Another noteworthy acquisition in the Israeli market is Fireglass’ acquisition by Symantec. The purchase price of this deal was not disclosed but it is thought to be around $250 million. Symantec has been a leading serial acquirer of security companies in recent years, gobbling up Lifelock for $2.3B earlier this year and Blue Coat for $4.65B in 2015. New York Market The United States houses 63% of the world’s privately-owned cybersecurity companies, 33% of these being based in California. New York holds the 4th place with 6% of the cybersecurity companies in the US, after Virginia (8%) and Massachusetts (7%). CBInsights found that the most well-funded privately-owned cybersecurity company in the US is the California-based endpoint protection company Tanium, with $395M in total disclosed funding. This is followed by Maryland’s Tenable Network Security with $302M raised to date, and then California- based smartphone security company Lookout, with $281M. According to the report, the three most funded cybersecurity companies in New York, as of September 2017, are Payfone ($69M), Dashlane ($50M), and Flashpoint ($43M). New York City is regarded as the finance capital of the world and has been ranked at the top of the World’s Financial Center report by the Global Financial Centers Index (GFCI). New York is the home to Wall Street, the most active stock marketplace and the New York Stock Exchange, the largest stock exchange by market capitalization. The city houses some of the largest Fortune 500 and Fortune 1000 companies, as well as banks such as Goldman Sachs, Morgan Stanley, Merrill Lynch, and JP Morgan. New York’s position as a financial capital makes the city vulnerable to cyber attacks. August 28, 2017 was the first compliance date of the nation’s first cybersecurity regulation. The New York regulation requires banks, insurance companies, and other financial services institutions to have a cybersecurity program designed to protect consumers’ private data; a written policy or policies that are approved by the board or a senior officer; a Chief Information Security Officer to help protect data and systems; and controls and plans in place to help ensure the safety of the city’s financial services industry. Solution Trends and Insights Organizations are constantly facing new kinds of cybersecurity challenges, resulting in a continual need to stay on top of new technology developments and adapt their protection accordingly. Main threats include the constant spike in the sophistication of hackers and attacks, the rising tide of ransomware, and the emergence of new connected platforms that require special protection - such as IoT devices, connected vehicles, and AI industrial machines. Israeli Trends Some of the emerging technologies and trends in Israel include: ● Funding deals in recent years show that investors are looking to back platform solutions rather than niche or single-purpose products, with mobile security, vulnerability & risk management, network security, SCADA security, and incident response being the most funded fields.
Recommended publications
  • Cyber Resiliency Metrics, Measures of Effectiveness, and Scoring
    M T R 1 8 0 3 1 4 Approved for Public Release; MITRE TECHNICAL REPORT Distribution Unlimited. Public Release Case Number 18-2579 Cyber Resiliency Metrics, Measures of Effectiveness, and Scoring Dept. No.: T8A2 Project No.: 5118MC18-KA The views, opinions and/or findings contained in this report are those of The MITRE Corporation and should not be construed as an official government position, policy, or decision, unless designated by Enabling Systems Engineers and Program other documentation. Approved for Public Release; Distribution Managers to Select the Most Useful Unlimited. Public Release Case Number 18- 2579 Assessment Methods NOTICE This technical data was produced for the U. S. Government under Contract No. FA8702- 18-C-0001, and is subject to the Rights in Technical Data-Noncommercial Items Clause Deborah J. Bodeau DFARS 252.227-7013 (JUN 2013) Richard D. Graubart ©2018 The MITRE Corporation. All rights reserved. Rosalie M. McQuaid John Woodill Bedford, MA September 2018 Abstract This report is intended to serve as a general reference for systems engineers, program management staff, and others concerned with assessing or scoring cyber resiliency for systems and missions; selecting cyber resiliency metrics to support cyber resiliency assessment; and defining, evaluating, and using cyber resiliency measures of effectiveness (MOEs) for alternative cyber resiliency solutions. Background material is provided on how cyber resiliency scores, metrics, and MOEs can be characterized and derived; based on that material, a wide range of potential cyber resiliency metrics are identified. Topics to address when specifying a cyber resiliency metric are identified so that evaluation can be repeatable and reproducible, and so that the metric can be properly interpreted.
    [Show full text]
  • Piper Jaffray Cybersecurity Earnings Update
    Piper Jaffray Cybersecurity Earnings Update Third Quarter 2017 Marc Steifman Greg Klancher Co-Head of Technology Principal Investment Banking Piper Jaffray & Co. Piper Jaffray & Co. MINNEAPOLIS | BOSTON | CHICAGO | HOUSTON | LONDON | LOS ANGELES | NEW YORK | SAN FRANCISCO | ZÜRICH Piper Jaffray Companies (NYSE: PJC) is an investment bank and asset management firm headquartered in Minneapolis with offices across the U.S. and in London, Zurich and Hong Kong. Securities brokerage and investment banking services are offered in the United States through Piper Jaffray & Co., member NYSE and SIPC, in Europe through Piper Jaffray Ltd., authorized and regulated by the Financial Conduct Authority, and in Hong Kong through Piper Jaffray Hong Kong, authorized and regulated by the Securities and Futures Commission. Asset management products and services are offered through three separate investment advisory affiliates registered with the U.S. Securities and Exchange Commission: Advisory Research Inc., Piper Jaffray Investment Management LLC and PJC Capital Partners LLC. Piper Jaffray & Co., Member SIPC and FINRA 11/17 Piper Jaffray Case Study: Vista Equity Partners acquires majority stake in Jamf Vista Equity Partners: Undisclosed . Vista Equity Partners is a U.S.-based investment firm with more than $30 billion in cumulative capital commitments, currently invests in software, data and technology-enabled organizations. The firm invests in middle market management and leveraged buyouts, growth and acquisition Has purchased a majority financing, recapitalizations, private transactions, spin-outs and corporate divestitures. stake in . The firm was founded in 2000 and is headquartered in Austin, Texas. Jamf: . Jamf focuses on helping businesses, education and government organizations succeed with November 2017 Apple through its Jamf Pro and Jamf Now solutions.
    [Show full text]
  • Collected from the Internet That Internet the from Collected Data of Off Based Profile Risk a Builds Score Risk Cyber FICO’S “FICO® Cyberriskscore,”FICO,2019
    TABLE OF CONTENTS 4 Overview 6 General Methodology Bibliography Entries 7 Frameworks & Scorecards 8 Barrett, Matthew P. (2018). Framework for Improving Critical Infrastructure Cybersecurity 1.1 8 Freund, Jack and Jack Jones (2014). Measuring and Managing Information Risk: a FAIR approach 8 Information Systems and Control Association (2019). Cobit 2019 8 International Organization for Standardization (2018). ISO/IEC 27000 family - Information security management systems 9 Center for Information Security (2019). Cybersecurity Tools 9 Global Cyber Alliance (2019). GCA Cybersecurity Toolkit for Small Business 9 European Telecommunications Standards Institute (2019). TC Cyber 9 Information Security Forum (2018). The ISF Standard of Good Practice for Information Security 2018 10 SWIFT (2019). SWIFT Customer Security Control Framework 10 BSA (2019). BSA Framework for Secure Software 10 American Public Power Association (2019). Cybersecurity Scorecard 10 BitSight (2019). BitSight Security Ratings 10 FICO (2019). FICO® Cyber Risk Score 11 F-Secure (2019). THE CYBER SECURITY Stress Test 11 NormShield (2019). The Comprehensive Cyber Risk Scorecard 11 NormShield (2019). The Rapid Cyber Risk Scorecard 11 RiskLens (2019). Risk Portfolio 11 Security Scorecard (2019). Security Scorecard 11 UpGuard (2019). BreachSight 11 Upguard (2019). VendorRisk 12 Cyber Insurance Metrics 13 European Union Agency for Network and Information Security (2016). Cyber Insurance: Recent Advances, Good Practices & Challenges 13 Böhme, Rainer and Galina Schwartz (2010). Modeling Cyber-Insurance: Towards A Unifying Framework 13 Marotta, Angelica et al. (2017). Cyber-insurance survey 13 Pal, Ranjan et al. (2014). Will Cyber-Insurance Improve Network Security? A Market Analysis 14 ROI/ROSI 15 European Union Agency for Network and Information Security (2012). Introduction to Return on Security Investment 15 Brangetto, Pascal and Mari Kert-Saint Aubyn (2015).
    [Show full text]
  • The Legality of Securityscorecard Data Collection European Market Edition
    The Legality of SecurityScorecard Data Collection European Market Edition SecurityScorecard.com 214 West 29th St, 5th Floor [email protected] New York, NY 10001 ©2018 SecurityScorecard Inc. 1.800.682.1707 Executive Summary SecurityScorecard delivers security ratings that empower enterprises to instantly and accurately monitor, assess and understand their own cybersecurity posture as well as the cyberhealth of all vendors and business partners in their ecosystems. SecurityScorecard does not collect or use personal data or other personal information related to its product offerings, which limits the applicability of the General Data Protection Regulation (GDPR) to its B2B operations. However, as part of its alignment with best business practices, SecurityScorecard is committed to compliance with GDPR and all applicable U.S. federal regulations, including the Federal Trade Commission (FTC) Act, the Computer Fraud and Abuse Act, and the Electronic Communications Privacy Act, which dictate how SecurityScorecard acquires, uses and discloses data. Since SecurityScorecard engages with clients in heavily regulated industries that are subject to GDPR and U.S. federal laws on personal data privacy, the company also focuses on requirements of laws that impact customers and how those laws apply to its own business operations. SecurityScorecard believes it is critical to be responsible, transparent and compliant with applicable global and federal laws, and respectful of third-party notices and agreements regarding data collection, storage and aggregation. SecurityScorecard understands that the collection and protection of data in accordance with applicable laws and identified best practices is not only a legal requirement but is also key to business success and of paramount importance to customers.
    [Show full text]
  • Scoring Methodology
    Table of Contents Cybersecurity Ratings 3 What do Scores Mean? 3 Factor Scores 4 Cybersecurity Signals 5 Signal Processing Workflow 14 Signal Collection 15 Attribution Engine 15 Cyber Analytics 17 Scoring Engine 17 Scoring Methodology 17 Size Normalization 18 Calibration Process 20 Calculating Factor Scores 20 Calculating Total Score 21 Breach Penalty 22 Keeping the Scoring Framework Current 22 Calibration Cadence 23 Industry Comparisons 23 Collaboration with End Users Validation 24 Limitations 25 FAQ 26 Cybersecurity Ratings The rise of the internet and its global role in e-commerce, business operations, communications, and social media, has created both opportunities and risks. While it can fuel economic growth and speed up the dissemination of news and ideas, the existence of vulnerabilities in commonly used software products and services, and poor adherence to recommended security practices can expose organizations to significant financial and reputational harm at the hands of malicious actors - including both individuals and nation-states. SecurityScorecard evaluates Cybersecurity ratings provide a means for objectively organizations’ security profiles monitoring the security hygiene of organizations and non-intrusively, using an gauging whether their security posture is improving or ‘outside-in’ methodology. This deteriorating over time. The ratings are valuable for approach enables vendor risk management programs, determining risk SecurityScorecard to operate at premiums for cyber insurance, credit underwriting and scale, measuring and updating financial trading decisions, M&A due diligence information, executive-level reporting, and for self-monitoring. cybersecurity ratings daily on Cybersecurity ratings and the extensive information on more than one million which they are based are also helpful for assessing organizations globally compliance with cybersecurity risk standards.
    [Show full text]
  • Cyber Defense Emagazine for February 2021
    Key Business Lessons Learned from The SolarWinds Hack Data Loss Prevention in Turbulent Times A Digital Journey: A Long and Winding Road Why Ensuring Cyber Resilience Has Never Been More Critical or More Challenging Than It Is Today …and much more… Cyber Defense eMagazine – June 2021 Edition 1 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide. CONTENTS Welcome to CDM’s June 2021 Issue ------------------------------------------------------------------------------------------------ 6 Key Business Lessons Learned from The SolarWinds Hack ---------------------------------------------------------32 By, George Waller, CEO of Strikeforce Technologies Data Loss Prevention in Turbulent Times -------------------------------------------------------------------------------35 By Otavio Freire, CTO & Co-Founder at SafeGuard Cyber A Digital Journey: A Long and Winding Road --------------------------------------------------------------------------39 By David Jemmett, CEO and Founder, Cerberus Sentinel Why Ensuring Cyber Resilience Has Never Been More Critical or More Challenging Than It Is Today -43 By Don Boxley, Co-founder and CEO, DH2i Uncovering hidden cybersecurity risks -----------------------------------------------------------------------------------46 By Adam Nichols, Principal of Software Security at GRIMM The Solution to Overcoming Cyber Threats in A 5g World ---------------------------------------------------------50 By Michael Abad-Santos, Senior Vice President of Business Development and Strategy, BridgeComm How An
    [Show full text]
  • Tulsa Enterprise for Cyber Innovation, Talent And
    Tulsa Enterprise for Cyber Innovation, Talent and Entrepreneurship (TECITE) Cybersecurity at TU A leader in cybersecurity research and education for more than 20 years FEDERAL CENTERS OF ACADEMIC EXCELLENCE n Information Assurance and Cyber Defense Education since 2000; one of the first 14 institutions awarded this distinction n Information Assurance Research n Cyber Operations n One of the few universities awarded all three distinctions PATENTS U.S. Patent No. 9,471,789, issued Oct. 18, 2016. Compliance method for a cyber-physical system. Inventors: J. Hale, P. Hawrylak, and M. Papa. U.S. Patent No. 9,038,155, issued May 19, 2015. Auditable multi-claim security token. Inventors: R. Gamble and R. Baird. U.S. Patent No. 6,732,180, issued May 4, 2004. A method to inhibit the identification and retrieval of proprietary media via automated search engines utilized in association with computer compatible communications networks. Inventors: J. Hale and G. Manes. EDUCATIONAL OPPORTUNITIES n Cyber Corps - NSF Scholarship-For-Service and DoD Information Assurance Scholarship Programs - Substantial number of graduates placed in government positions n MS in Cybersecurity Professional Track degree offered online along with a traditional residential program n Undergraduate Exposure in Cybersecurity - Substantial curriculum offerings -Research engagement through funded support and the Tulsa Undergraduate Research Challenge - Minor that attracts undergraduate students from computer science, engineering and business RESEARCH n Interdisciplinary research
    [Show full text]
  • Elite 80 the Hottest Privately Held Cybersecurity and It Infrastructure Companies
    Cybersecurity & IT Infrastructure APRIL 2021 ELITE 80 THE HOTTEST PRIVATELY HELD CYBERSECURITY AND IT INFRASTRUCTURE COMPANIES Copyright: Shutterstock/Paopano Erik Suppiger [email protected] (415) 835-3918 FOR DISCLOSURE AND FOOTNOTE INFORMATION, REFER TO JMP FACTS AND DISCLOSURES SECTION. Cybersecurity & IT Infrastructure TABLE OF CONTENTS Executive Summary ....................................................................................................................................................................................... 4 Funding Trends .............................................................................................................................................................................................. 5 Index by Venture Capital Firm ..................................................................................................................................................................... 11 Aqua Security ............................................................................................................................................................................................... 15 Arctic Wolf .................................................................................................................................................................................................... 16 Armis ...........................................................................................................................................................................................................
    [Show full text]
  • 2019 Healthcare Cybersecurity Report
    2019 Healthcare Report securityscorecard.com [800] 682 1707 Overview The healthcare industry still needs improvement in its cybersecurity posture. Meanwhile, malicious actors increasingly target electronic protected health information (ePHI) because the data it contains provides enough information to steal a person’s full identity. Healthcare databases store a plethora of information “It’s no secret in healthcare, significant including social security numbers, financial, health insurance, risk exists in the supply chain and and driver’s license data. Online toolkits make targeting this information easier, increasing the number of malicious actors. it's increasing as systems supporting In December 2018, Dark Reading described how attackers can clinical and administrative processes remotely launch attacks that render firmware and hardware are migrating out of our data centers inoperable.¹ and into the hands of service providers In this year’s report, SecurityScorecard looked at 26,204 more and more. SecurityScorecard companies from September 2, 2018 to January 28, 2019 and gives us a lens into how seriously our analyzed terabytes of information to assess risk across ten risk service providers take the security factors. of their platforms. We’re using it as an input into selecting the right service providers, getting the contracts Key Insights and service levels right, monitoring y The healthcare industry ranks eighth out of eighteen other adherence to those contracts, and major U.S. industries. to drive honest conversations about y Ranks eighth out of eighteen for application security when security – which are most important.” compared to other major U.S. industries. y Ranks thirteenth out of eighteen in DNS health when Taylor Lehmann compared to other major U.S.
    [Show full text]
  • SSC-2017-Financial-Report.Pdf
    Overview In 2016, the financial services sector was attacked 65 times more often than any other sector, according to the IBM Security Trends in the Financial Services Sector Report. And with the sensitive and high- value nature of data held by financial institutions, these hacker threats have not slowed down in the past year. The frequency and amount of attacks in combination with the increase in regulatory mandates and enforcement in 2017 mean that maintaining good cybersecurity hygiene is increasingly important for financial institutions. The recent Equifax breach serves as a reminder that financial institutions, in particular, are businesses that are based on trust. With customers becoming more informed on cybersecurity risks, it’s paramount for financial institutions to develop and maintain risk mitigation practices that foster good cybersecurity health. To take a look at the cybersecurity health of financial institutions, this September, SecurityScorecard analyzed 2,924 financial institutions in the SecurityScorecard platform to find existing vulnerabilities within banks, investment firms, and other financial firms to determine the cybersecurity performance of the financial sector, especially as compared to other industries. Our team also analyzed the cybersecurity posture of the Top 20 highest performing FDIC-insured banks to understand what security factors pose risks to these financial institutions. 3 Key Insights A SecurityScorecard rating is a comprehensive indicator of relative security health, or security posture. The SecurityScorecard platform looks at ten primary risk factors. Within each factor, a breadth of unique data points is scored and weighted to determine an overall factor grade. Each factor grade is then appropriately weighted and used to calculate an organization’s overall rating.
    [Show full text]
  • Transforming Insights Into Cyber Resilience Via Technology Integration
    Transforming Insights into Cyber Resilience via Technology Integration FEBRUARY 2018 SECURITYSCORECARD.COM ARAVO.COM Aravo and SecurityScorecard Partner to Persistently Assess Third-Party Cyber-health Aravo, an industry leader third-party risk management solutions, and SecurityScorecard, the industry leader in security ratings, have partnered to integrate their solutions to provide today’s global extended enterprises with a unique approach to assessing their third party ecosystem for cybersecurity vulnerability, and ensuring the appropriate remediation plans are in place. This ability to take predictive insight and embed into action plans is a critical requirement for securing vulnerable vendor ecosystems that are evolving and expanding as rapidly as the modern cyberattack surface. Overview Enterprises continue to struggle with the increasingly difficult mandate to consistently improve, maintain, and document cybersecurity in order to protect and enhance brand reputation, customer trust, and the bottom line. Top of mind on the cybersecurity agenda is adopting a more agile approach to managing emerging risks across an organization’s third-party portfolio. The staggering cost of data breaches continues to escalate and is predicted to exceed $2 trillion by next year, according to Juniper Research. The average cost of a single breach is more than $4 million, estimates the Ponemon Institute. Industry analysts suggest that nearly two-thirds of data breaches can be attributed to third-party vendors. 2 Third parties are woven into the very fabric of the modern enterprise, and are intrinsically linked to business success and reputation. Today’s complex and dynamic third-party networks, which can comprise thousands of suppliers, distributors, franchises, resellers, contractors, service providers, and other business partners, bring strategic advantages to a relationship; but they also bring vulnerabilities.
    [Show full text]
  • Technical Compendium Supply Chain Security in the Cyber Age Sector Trends, Current Threats and Multi-Stakeholder Responses
    TECHNICAL COMPENDIUM SUPPLY CHAIN SECURITY IN THE CYBER AGE SECTOR TRENDS, CURRENT THREATS AND MULTI-STAKEHOLDER RESPONSES OLEG DEMIDOV & GIACOMO PERSI PAOLI ACKNOWLEDGEMENTS UNIDIR’s Security and Technology Programme is supported by the Governments of Germany, the Netherlands, Norway and Switzerland. The authors would like to thank Mr. Chris Nissen, Director, Asymmetric Threat Response and Supply Chain Security at The MITRE Corporation; Mr. Donald A. (Andy) Purdy, Jr., Chief Security Officer at Huawei Technologies (United States of America); Mr. Kai Michael Hermsen, Global Coordinator for the Charter of Trust at Siemens AG; and Ms. Kerstin Vignard, Head of the support team to General Assembly processes pursuant to resolutions 73/27 and 73/266 at UNIDIR for discussing the report’s content and providing feedback and recommendations. ABOUT UNIDIR The United Nations Institute for Disarmament Research (UNIDIR) is a voluntarily funded, autonomous institute within the United Nations. One of the few policy institutes worldwide focusing on disarmament, UNIDIR generates knowledge and promotes dialogue and action on disarmament and security. Based in Geneva, UNIDIR assists the international community to develop the practical, innovative ideas needed to find solutions to critical security problems. NOTE The designations employed and the presentation of the material in this publication do not imply the expression of any opinion whatsoever on the part of the Secretariat of the United Nations concerning the legal status of any country, territory, city
    [Show full text]