Cyber-security is rarely far from the headlines, but reporting tends to focus on big events rather than a general growth in attacks and the evolving domain of conflict. As the world becomes more interconnected, nation-state incursions that steal, destroy or damage information, or that spy on or embarrass their targets, are a growing concern among policymakers and corporate executives alike, with more countries facing accusations of either conducting or sponsoring such attacks. The shifting landscape of state-sponsored threats—and how stakeholders respond to them—will have a major impact on how firms operate and what they perceive to be the best way to mitigate threats. This is crucial as cyber-attacks increasingly target new sectors and different types of data.
This report assesses corporate perceptions of nation-state cyber-threats. It finds that companies have become aware of the challenges posed by such threats and are concerned about them; however, their ability to respond to evolving risks may be lacking. The key findings are:
- Firms’ confidence in their ability to handle nation-state threats may be overstated. Companies recognise the threat posed by nation-state attacks and demonstrate a high degree of confidence in their ability to face them. This confidence may be inflated, however, according to experts interviewed for this report.
- Executives in Asia show a subtle but noticeable trend of both greater concern and greater readiness than their European and North American counterparts.
- Concerns over nation-state threats have evolved to encompass more factors. Cyber-attacks were once primarily viewed as a financial risk. Now, however, nation-state attacks also often target confidential materials and other important information (such as medical data), as highlighted by recent sophisticated breaches. Our survey respondents recognise this shift and view nation-state actors as a rising future threat.
- Greater political will, at home and abroad, is crucial to combating the issue. Executives and experts view stronger cyber-security legislation and regulation as key ways to cultivate a safer cyber-environment, followed closely by stronger international agreements, which have been elusive to date.
- The covid-19 pandemic has led to growing opportunities for cyber-incursions, especially to gain a foothold in the vaccine race. Experts interviewed for this report all note an increase in foreign actors trying to exploit weaknesses to gain access to sensitive pandemic-related data, particularly in sectors such as healthcare.