FS Cyber trends for 2019

David Ferbrache, CTO Cyber, KPMG UK

14 March 2019

2© 2019 KPMG LLP, a UK limited liability partnership and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved.© 2019 KPMG LLP, a UK limited liability partnership and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved. 2

− Concern over infrastructure targeting and disruption as States build and test offensive cyber weapons

− Increasing systemic risk through aggregation of services

− Growth in attacks on e-commerce web sites

− Ransomware returns – but crypto currency attacks continue

− Supply chains receive more attention from attackers

− Cyber crime becomes a $600 Billion a year transnational enterprise

− Automation of attacks by criminal groups to provide scale/pace

Challenges

− Manipulation of information space grows in scale by State and by organised crime

− CEO Frauds make money – they will grow in scale/sophistication

3© 2019 KPMG LLP, a UK limited liability partnership and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved.© 2019 KPMG LLP, a UK limited liability partnership and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved. 3

− Critical national infrastructure gets growing regulatory attention (NIS)

− Political concerns over resilience driven by recent banking incidents

− Increased investment in automation of security control monitoring/compliance

− Models of security are changing driven by cloud and devsecops – with big impacts

− Active defence not just for government

− Drive towards improved international collaboration but limited by complex geopolitics

− Cyber security spending passes the $100 Billion a year mark

− Greater senior leadership “buy in and embedding in business

− Increased emphasis on digital trust and consumer awareness

− Link cyber security and fraud control

− Expectations of growing regulatory sanctions (GDPR)

− Increased transparency over outages and incidents

Responses

© 2019 KPMG LLP, a UK limited liability partnership and a member firm of the KPMG network of independent member firms affiliatedwith KPMG International Cooperative (“KPMG International”), a Swiss entity. All rights reserved.

For full details of our professional regulation please refer to ‘Regulatory Information’ at www.kpmg.com/uk

The KPMG name and logo are registered trademarks or trademarks of KPMG International. | Create KGS: CRT083036

The information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. Although we endeavour to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation.

kpmg.com/uk

David Ferbrache OBECTO, Cyber SecurityTel: +44 (0) 131 527 6660david.ferbrache@kpmg.co.uk