In 2018, Accenture Security surveyed 4,600 executives to understand the extent to which organizations prioritize security, how comprehensive their security plans are, what security capabilities they have, and their level of spend on security. 100 of those executives are based in New York City.

1. GAININGGROUND
ONTHECYBER
ATTACKER
2018 State of Cyber Resilience
NEW YORK

2. Copyright © 2018 Accenture. All rights reserved.
SECURITY TEAMS
HAVE MADE PROGRESS
DEFENDING AGAINST
CYBER ATTACKS.
But more needs to be done.

3. In 2018, NYC-based companies were able to prevent 72% of targeted attacks
compared to global average of 87%.
IMPROVING CYBER RESILIENCE IN NEW YORK
Copyright © 2018 Accenture Security. All rights reserved. 3
72%
87%
28%
13%
New York
Global
Security breaches prevented Security breaches not prevented

4. NYC-BASED COMPANIES ARE BECOMING FASTER
AND MORE EFFECTIVE AT FINDING BREACHES
WHEN THEY DO OCCUR
In 2018, 64% of breaches are identified within seven days, higher than the
global average of 55%.
New York19%
12%
45%
43%
23%
34%
13%
11%
New York
Global
Less than one day 1 - 7 days 1 - 4 weeks More than one month 4

5. MOST ORGANIZATIONS ARE ABLE TO REMEDIATE
A BREACH IN 60 DAYS OR LESS
In 2018, 87% of organizations remediate a breach in < 60 days, higher
than the global average of 74%.
New York47%
38%
40%
36%
9%
23%
4%
4%
New York
Global
Within 30 days 31 - 60 days 61 - 90 days More than 90 days 5

6. Copyright © 2018 Accenture. All rights reserved. 6
INTERNAL ATTACKS ACCOUNT FOR THE MOST
FREQUENT SECURITY BREACHES
72%
48%
48%
70%
56%
43%
Internal attack (e.g.,
malicious insiders)
Hacker attack
Configuration error
that affected security
NYC
Global

7. Copyright © 2018 Accenture Security. All rights reserved. 7
INVESTMENTS IN CYBERSECURITY TODAY WILL
SECURE THE FUTURE OF THE ORGANIZATION
In 2018, NYC-based organizations spend more on cybersecurity on average,
compared to global counterparts.
22%
17%
14%
19%
19%
15%
8%
14%
% of total IT budget
% of total OT budget
% of total annual
revenue
% of operational costs
NYC
Global

8. 8
BUDGET AUTHORIZATION RESTS AT THE HIGHEST
LEVELS OF THE ORGANIZATION
32%
22%
16%
7%
16%
32%
27%
12%
11%
9%
CEO/Executive Committee
Board of Directors
Chief Financial Officer
Chief Operating Officer
Chief Information Security
Officer/Chief Security Officer
NYC
Global
Copyright © 2018 Accenture Security. All rights reserved.

9. 9
WITH MORE BUDGET, SECURITY INVESTMENTS
WOULD BE DIRECTED TOWARD TECHNOLOGIES
AND INNOVATIONS
68%
64%
46%
50%
40%
15%
62%
59%
54%
52%
36%
13%
Filling known gaps in cybersecurity
technology
Adding new innovations in
cybersecurity
Filling known gaps in capabilities
(other than staffing and technology)
Filling security staffing gaps
Better reporting tools
End user training
NYC
Global
Copyright © 2018 Accenture Security. All rights reserved.

10. GAIN GROUND ON THE CYBER ATTACKER
Copyright © 2018 Accenture. All rights reserved.
FIVE WAYS TO
BECOME CYBER
RESILIENT.
New York

11. 1. Build a strong foundation: Identify high value assets and harden them.
Ensure controls are deployed across the organizational value chain, not just
the corporate function.
2. Pressure test resilience like an attacker: Enhance defense teams and
provide analysis on where improvements need to be made.
3. Employ breakthrough technologies: Free up investment capacity to invest
in technologies that can automate your defenses. Utilize automated
orchestration capabilities, advanced behavioral analytics, and artificial
intelligence / machine learning.
4. Be proactive and use threat hunting: Develop strategic and tactical threat
intelligence tailored to your environment to identify potential risks. Monitor
for anomalous activity at the most likely points of attack.
5. Evolve the role of CISO: Develop the next generation CISO – steeped in
the business and balancing security based on business risk tolerance.
FIVE STEPS TO ACHIEVE CYBER RESILIENCE
Copyright © 2018 Accenture. All rights reserved. 11

12. Copyright © 2018 Accenture. All rights reserved. 12
ABOUT THE RESEARCH
In 2018, Accenture Security surveyed 4,600
executives (100 of which were based in New
York City) to understand the extent to
which organizations prioritize security, how
comprehensive their security plans are, what
security capabilities they have, and their level
of spend on security.
Respondents represented organizations with
annual revenues of $1bn or more—from 19
industries and 15 countries across North and
South America, Europe and Asia Pacific.
More than 98 percent of respondents were
sole or key decision-makers in cybersecurity
strategy and spending for their organization. LEARN MORE
accenture.com/stateofcyber
2018 State of Cyber Resilience

13. Copyright © 2018 Accenture. All rights reserved. 13
ACCENTURE IN THE UNITED STATES
Accenture is a leading professional services company providing
a broad range of services and solutions in strategy, consulting,
digital, technology and operations. Serving 95 of the Fortune
100 and more than 70 percent of the Fortune 500, Accenture
employs an innovation-led approach to help clients imagine and
invent their future. The company has more than 50,000 people
and operations in 42 cities in the United States. Accenture was
named one of the leading companies to Change the World by
Fortune magazine and is consistently recognized as a FORTUNE
Blue Ribbon Company. With an unwavering commitment to
inclusion and diversity, the company appears regularly on
FORTUNE’s 100 Best Companies to Work For and DiversityInc’s
Top 50 Companies for Diversity lists. Visit us at
accenture.com/US.
ACCENTURE SECURITY
Accenture Security helps organizations build resilience from the
inside out, so they can confidently focus on innovation and
growth. Leveraging its global network of cybersecurity labs, deep
industry understanding across client value chains and services
that span the security lifecycle, Accenture protects organization’s
valuable assets, end-to-end. With services that include strategy
and risk management, cyber defense, digital identity, application
security and managed security, Accenture enables businesses
around the world to defend against known sophisticated threats,
and the unknown. Follow us @AccentureSecure on Twitter or visit
the Accenture Security blog.
FOR MORE INFORMATION,
PLEASE CONTACT:
JOHN CONNOLLY
Accenture
+1 917 452 0837
john.a.connolly@accenture.com