OECD
Sinopse: The accelerating digital transformation of our economies and societies brings remarkable benefits to businesses, public sector organisations and individuals, from enhanced competitiveness and improved well-being, to increased resilience during major catastrophes such as the global COVID-19 pandemic. However, this transformation has been increasing our digital dependency as well as the scope, scale and overarching complexity of organisations’ information systems, networks, data assets and data flows. Organisations have not always sufficiently assessed the digital security risk incurred by this evolution, nor taken proportionate security measures to manage it. Individuals are confused by complex cybersecurity technical jargon, settings and procedures such as updates, authentication processes, etc. Products and services are not sufficiently secure and expose users to security risks without giving them appropriate information and means to mitigate them. Criminal and state-sponsored threat actors are taking advantage of this situation, scaling up their nefarious actions for financial, political, and geopolitical gains, amongst others. Recent research suggests that the global cost of cyberattacks ranges from USD 100 billion to USD 6 trillion annually and that the amount is rising every year (OECD, 2021[1]). While individuals fall victim of identity theft schemes, cyberfraud, and personal data breaches, businesses face cyberattacks that harm their assets, reputation and competitiveness, and can even result in disruption of global supply chains, as demonstrated by the 2017 Wannacry and NotPetya attacks.
