Too few organisations in the financial services sector are investing in the response mechanisms needed to cope with cyber-crime incidents, a PwC survey has found.
This is despite cyber-crime now being a major cause of losses in the financial sector, ahead of accounting fraud, bribery and corruption and even money laundering, it said.
The prominence of cyber-crime in the figures, drawn from 878 responses from professionals in the sector in 56 countries, is no surprise given that almost all cyber-crime impacts on financial services at some point.
Cyber-crime is now the second biggest cause of economic crime experienced by the sector, beating all other forms bar catch-all ‘asset misappropriation’ (mostly simple physical theft) even though PwC admits that definitions of what constitutes it vary from organisation to organisation.
Many financial organisations still prefer to draw a veil over the issue of cyber-crime losses because of the technological ‘lack’ it suggests in their operations.
"Our survey shows cyber-crime accounts for a much greater proportion of economic crime in the FS sector than in other industries," said PwC forensic services partner, Andrew Clark.
"Cyber-crime puts the FS sector’s customers, brand and reputation at significant risk. Regulators are increasingly viewing cyber-crime as a key area of focus and financial institutions are expected to have appropriate systems and controls in place to fight this growing threat."
Only 18% of firms had all five of the incident response mechanisms deemed important by PwC, including detection and investigation systems, forensics, shutdown procedures and PR and media help to cope with the reputational fallout.
Tellingly, almost a third of staff in financial services had not received any cyber-security training.
The latest figures are sector-specific results taken from a larger report PwC published last November that showed cyber-crime becoming a measurable financial problem across all industries.
IDG News Service
Subscribers 0
Fans 0
Followers 0
Followers