Technology risk radar

4
What happened?
IT infrastructure
was misused or
abused
IT did not behave
as expected
22.8
5.3
6.5
IT did not meet
customer need
3
Figures are %
20.7
15.5
An IT service or system was
not available when required
Performance
of an IT service
or system was
degraded
Cyber security incidents continue to be the attentiongrabbing
element of technology risk within business
today. But here is something interesting that our research
uncovered - only a little over half of the 700+ surveyed IT
incidents were security related, with most being attributed
to data being stolen or compromised intentionally. About
36 percent affected the availability or performance of a key
IT service. And an additional 9 percent affected the quality of
a key IT service with IT either not behaving as expected or
not meeting customer need.
The proportion of incidents related to security, availability
and quality followed the same order across all ten industries
surveyed, i.e., security related incidents were most prevalent,
followed by availability and quality related incidents.
These statistics are alarming, as these incidents must arise
from a failure of internal controls – checks that should be a
basic element in any security control system, technological
or otherwise. Cyber security therefore, continues to be a key
area of concern for organisations. Later in this document,
KPMG member firms technology risk specialists provide
some practical insights on how organisations can protect
themselves and better prioritise their investment in this area.
26.2
Data was lost
or exposed
unintentionally
Data was stolen or compromised
intentionally
© 2016 KPMG International Cooperative (“KPMG International”). KPMG International provides no client services and is a Swiss entity with which the independent member firms of the KPMG network are affiliated.