We use cookies to distinguish you from other users and to provide you with a better experience on our websites. Close this message to accept cookies or find out how to manage your cookie settings.
We use cookies to distinguish you from other users and to provide you with a better experience on our websites. Close this message to accept cookies or find out how to manage your cookie settings.
Published online by Cambridge University Press: 31 January 2019
In this chapter we present the results of the analyses of the first wave (June- August 2016). Before entering into detail, we report that the questionnaire was filled in primarily by high-level representatives of the participating businesses: or 37.8% of the respondents classified themselves as CEO or member of the executive board; 19.5% as managing director; 10.7% as Chief Information Security Officer; 10.7% as other IT staff and 5.9% as executive director. This suggests that the respondents had a good evidence base to assess both victimization and impact correctly.
The chapter is structured as follows. First, we discuss the extent to which businesses have been confronted with cybercrime in the 12 months preceding the survey, this includes, both the business victimization prevalence for each cybercrime type, and the incidence of each type. Next, we focus on the business representatives’ perceptions of the likelihood of their business being attacked in the following 12 months. Third, we estimate the harms to material support, that is, the costs of cybercrime that the businesses have experienced in the 12 months before the survey. Fourth, we discuss the business representatives’ assessments of the non-material harm of cybercrime that the businesses have experienced in the same time span. Finally, we give an overview of the technical and procedural measures businesses have taken to prevent cybercrime victimization.
VICTIMIZATION IN THE PAST 12 MONTHS
Two thirds of the businesses in our sample (66.5% or 181 businesses) have been victims of cybercrime, at least once in the last 12 months. Specifically, illegal access to IT systems and data/system interference are much more prevalent than the other types: 50% of the businesses (or 155 businesses) report illegal access to their IT systems and 44% (or 128 businesses) data/system interference. Less than a quarter admit cyber extortion (24.1% or 68 businesses), and still fewer internet fraud (12.9% or 35 businesses) and cyber espionage (3.6% or 10 businesses).
The majority of the businesses have suffered repeated attacks. The data shows that 83.2% of the 155 victims report repeated attempts at illegal access to their IT system; 72.7% of the 128 victims experience repeated incidents of data or system interference, and 57.4% of the 68 victims report repeated cyber extortion incidents.
To save this book to your Kindle, first ensure no-reply@cambridge.org is added to your Approved Personal Document E-mail List under your Personal Document Settings on the Manage Your Content and Devices page of your Amazon account. Then enter the ‘name’ part of your Kindle email address below. Find out more about saving to your Kindle.
Note you can select to save to either the @free.kindle.com or @kindle.com variations. ‘@free.kindle.com’ emails are free but can only be saved to your device when it is connected to wi-fi. ‘@kindle.com’ emails can be delivered even when you are not connected to wi-fi, but note that service fees apply.
Find out more about the Kindle Personal Document Service.
To save content items to your account, please confirm that you agree to abide by our usage policies. If this is the first time you use this feature, you will be asked to authorise Cambridge Core to connect with your account. Find out more about saving content to Dropbox.
To save content items to your account, please confirm that you agree to abide by our usage policies. If this is the first time you use this feature, you will be asked to authorise Cambridge Core to connect with your account. Find out more about saving content to Google Drive.
