Cisco has revealed the mounting cost of data breaches to businesses, saying companies are losing 20% of revenues and new customer business as a consequence of hackers stealing or accessing data.
The company's Annual Cybersecurity Report 2017 also explained that although 90% of companies have started improving their threat defences, they still have security gaps in which hackers can break into their systems.
Worryingly, companies only have the resources to investigate 56% of the security alerts they receive, meaning many threats are not being combatted at the point of entry. A third of these turn out to be serious threats, which should be investigated at the first indication of a security risk.
"In 2017, cyber is business, and business is cyber - that requires a different conversation, and very different outcomes," John Stewart, senior vice president and chief security and trust officer, Cisco.
"Relentless improvement is required and that should be measured via efficacy, cost, and well managed risk. The 2017 Annual Cybersecurity Report demonstrates, and I hope justifies, answers to our struggles on budget, personnel, innovation and architecture."
Some of the problem areas are hackers introducing new methods of attack to evade detection, organisations adopting cloud applications that aren't secure and adware, which infected 75% of the organisations investigated by Cisco.
Cisco's report also revealed the amount of time it's taking companies to realise there's a threat. It claimed companies using its security products have reduced the time of detection from 14 hours at the beginning of 2016 to just six hours in 2016.
"One of our key metrics highlighted in the 2017 Annual Cybersecurity Report is the time to detection' the time it takes to find and mitigate against malicious activity," David Ulevitch, vice president and general manager of security business at Cisco. "We have brought that number down to as low as six hours. A new metric the time to evolve' looked at how quickly threat actors changed their attacks to mask their identity.
"With these and other measures gleaned from report findings, and working with organisations to automate and integrate their threat defense, we can better help them minimize financial and operational risk and grow their business."
-
RSAC Conference 2025: The front line of cyber innovationITPro Podcast Ransomware, quantum computing, and an unsurprising focus on AI were highlights of this year's event
-
Anthropic CEO Dario Amodei thinks we're burying our heads in the sand on AI job lossesNews With AI set to hit entry-level jobs especially, some industry execs say clear warning signs are being ignored
-
Cisco eyes network security gains for agentic AINews New network security updates aim to secure AI agents across enterprises
-
Cisco patches critical flaw affecting Identity Services EngineThe networking giant has urged enterprises to update immediately
-
96% of businesses have low cyber-readiness, claims CiscoThe 2025 Cisco Cybersecurity Readiness Index shows a concerning number of businesses globally are unprepared for rising AI-related threats.
-
Cisco takes aim at AI security at RSAC with ServiceNow partnershipNews The companies claim Cisco AI Defense and ServiceNow SecOps will help address new challenges raised by AI
-
Cisco claims new smart switches provide next-level perimeter defenseNews Cisco’s ‘security everywhere’ mantra has just taken on new meaning with the launch of a series of smart network switches.
-
Cisco is jailbreaking AI models so you don’t have to worry about itNews Cisco's new AI Defense security solution helps organizations shore up LLM security by identifying potential flaws.
-
Cisco dispels Kraken data breach claims, insists stolen data came from old attackNews Cisco has refuted claims it has suffered a data breach after the Kraken threat group posted stolen data online.
-
Cisco patches critical flaws in Identity Services EngineNews Cisco has issued patches for a pair of critical vulnerabilities affecting its Identity Service Engine (ISE).
