While the healthcare industry may be better than the global average when it comes to preventing security breaches, cyberattacks are still a very real threat. The cost of preventing these breaches and attacks is above other industries and is only continuing to rise. Different attack types create different issues, often causing healthcare organizations to lose focus. Better prevention and faster detection come from a balanced approach with innovation and investment in new technologies. Learn more: https://accntu.re/2Kr2Rhx

1. COSTOF
CYBERCRIME
STUDY
INSIGHTSONTHE
SECURITYINVESTMENTS
THATMAKEADIFFERENCE
INHEALTHCARE

2. Copyright © 2017 Accenture Security. All rights reserved. 2
EXECUTIVE SUMMARY – INVESTING IN CYBER
SECURITY
While the healthcare industry may be better than the global average when it comes to preventing security
breaches, cyberattacks are still a very real threat. The cost of preventing these breaches and attacks is
above other industries and is only continuing to rise. Different attack types create different issues, often
causing healthcare organizations to lose focus. Better prevention and faster detection comes from a
balanced approach with innovation and investment in new technologies.
Take a look into some of the causes and consequences of cybersecurity and its cost to the healthcare
industry. From phishing and denial of service to malicious code and malicious insiders, your healthcare
organization has the information needed to improve cybersecurity effectiveness. Gain insight on the impact
of cyberattacks, determine your next steps and take advantage of the innovation opportunity this offers your
organization.

3. SECURITY BREACHES
CONTINUE TO PLAGUE
HEALTHCARE
Average annualized cost
of cyber crime (USD)
$12.47MAverage number of security
breaches each year
35
+41.06%Percentage increase in the
last year
… AND SPENDING
ON BREACHES
CONTINUES TO RISE
… BUT HEALTHCARE IS
BETTER THAN THE GLOBAL
AVERAGE
Average number of security
breaches each year
130
Copyright © 2017 Accenture Security. All rights reserved. 2

4. 5.04
5.07
6.47
7.10
7.34
7.36
8.28
9.30
10.22
11.05
12.47
13.17
14.46
17.20
$18.28
$0 4 8 12 16 20
Hospitality
Education
Life science
Communications
Consumer products
Transportation
Public sector
Retail
Industrial/manufacturing
Services
Healthcare
Technology and software
Aerospace and defense
Utilities and energy
Financial services Average annualized
cost by industry sector
US$ millions
Legend
n = 109 interviews
in the Healthcare Industry
Total annualized cost
Copyright © 2017 Accenture Security. All rights reserved. 4
COSTS ARE ABOVE AVERAGE
VS OTHER INDUSTRIES

5. Copyright © 2017 Accenture Security. All rights reserved. 5
IN HEALTHCARE, PHISHING AND DENIAL OF
SERVICES ARE THE TWO MOST COSTLY
ATTACK TYPES
Average cost
per attack
$ thousands
Legend
n = 109 interviews
in the Healthcare
Industry
989
6,140
24,566
80,852
100,100
117,270
121,500
125,725
$129,800
$0K 50 100 150
Botnets
Malware
Stolen devices
Web-based attacks
Malicious code
Ransomware
Malicious insiders
Denial of services
Phishing & social
engineering

6. Copyright © 2017 Accenture Security. All rights reserved. 6
MALICIOUS CODE AND MALICIOUS INSIDERS TAKE
THE LONGEST TO RESOLVE
Length of time to resolve
an attack in days
Estimated average time is
measured for each attack
type in days
Legend
N = 109 Interviews in the
Healthcare Industry
FY 2016
FY 2017
2.5
5.4
14.1
16.8
21.4
22.3
19.1
47.5
48.4
1.5
5.1
13.9
18.7
22.3
19.4
23.4
47.5
47.7
0 Days 10 20 30 40 50 60
Botnets
Malware
Stolen devices
Denial of service
Phishing & social
engineering
Ransomware
Web-based attack
Malicious insiders
Malicious code

7. Copyright © 2017 Accenture Security. All rights reserved. 7
DETECTION ACCOUNTS FOR 37% OF SECURITY
COSTS FOR HEALTHCARE COMPANIES …
25
Containment
16
Recovery
10
Investigation
37
Detection
12
Incident Management
and ex-post response
Percentage cost
by internal activities
Legend
n = 109 interviews
in the Healthcare Industry
Detection
Containment
Recovery
Investigation
Incident Management
and ex-post response

8. 2
Equipment
Damage
Copyright © 2017 Accenture Security. All rights reserved. 8
… BUT INFORMATION LOSS IS ONE OF THE
MOST EXPENSIVE CONSEQUENCES OF
CYBER ATTACKS IN HEALTHCARE
Percentage cost
by consequence
Legend
n = 109 interviews in the
Healthcare Industry
Business disruption
Information loss
Revenue loss
Equipment damage
42
Information
Loss
25
Revenue Loss
31
Business
Disruption

9. Copyright © 2017 Accenture Security. All rights reserved. 9
SPENDING LEVELS ARE WELL BALANCED FOR KEY
SECURITY TECHNOLOGIES WITH AI 3RD AND
ADVANCED ANALYTICS 4TH FOR COST SAVINGS …
+1
-1
-1
+1
+1
-1
+1
+1
-2
0 1 2 3 4 5 6 7 8 9
Automated policy management
Enterprise deployment of
Governance, Risk & Compliance
Extensive use of data
loss prevention
Extensive deployment of
encryption technologies
Advanced perimeter controls
Extensive use of cyber analytics
and User Behavior Analytics
Automation, orchestration
and machine learning
Advanced identity and
access governance
Security intelligence systems
Value gap
Rank orderings by
spending levels
and cost savings
Legend
1 = Highest rank
9 = Lowest rank
Rank by percentage
spending
Rank by cost savings

10. Copyright © 2017 Accenture Security. All rights reserved. 10
… ONLY 15% HAVE DEPLOYED AI SECURITY
TECHNOLOGIES AND ADVANCED ANALYTICS
15
15
15
23
33
46
54
53
54%
Automation, orchestration
and machine learning
Automated policy management
Extensive use of cyber analytics
and User Behavior Analytics
Enterprise deployment of
Governance, Risk & Compliance
Extensive use of
data loss prevention
Advanced perimeter controls
Extensive deployment of
encryption technologies
Security intelligence systems
Advance identity and access goverance
0% 10 20 30 40 50 60 70
Nine enabling security
technologies deployed
in Healthcare
Legend
n = 109 interviews
in the Healthcare Industry
Percentage
deployment
frequency

11. Copyright © 2017 Accenture Security. All rights reserved. 11
PRIORITIZE BREAKTHROUGH INNOVATIONS
LIKE AI AND ANALYTICS
Organizations need to:
1. Better balance investments in security technologies
2. Use compliance technology—but don’t
bet the business on it
3. Grasp the innovation opportunity
1
2
3

12. Copyright © 2017 Accenture Security. All rights reserved. 12
WE RECOMMEND THREE
STEPS TO IMPROVE
CYBERSECURITY
EFFECTIVENESS
Become brilliant at the basics
Build cybersecurity on a strong foundation
Undertake extreme pressure testing
Identify vulnerabilities more rigorously
Invest in breakthrough innovation
Enhance program effectiveness and scale value
1
2
3

13. Copyright © 2017 Accenture Security. All rights reserved. 13
ABOUT THE RESEARCH
2,182
interviews
7countries
Australia
France
Germany
Italy
Japan
United
Kingdom
United States
254
companies
8-year
research
program
Jointly developed with:
Examining the economic impact of cyber attacks

14. About Accenture
Accenture is a leading global professional services
company, providing a broad range of services and
solutions in strategy, consulting, digital, technology
and operations. Combining unmatched experience
and specialized skills across more than 40 industries
and all business functions—underpinned by the
world’s largest delivery network—Accenture works
at the intersection of business and technology
to help clients improve their performance and
create sustainable value for their stakeholders.
With approximately 425,000 people serving clients
in more than 120 countries, Accenture drives
innovation to improve the way the world works
and lives. Visit us at www.accenture.com
About Accenture Security
Accenture Security helps organizations build
resilience from the inside out, so they can
confidently focus on innovation and growth.
Leveraging its global network of cybersecurity labs,
deep industry understanding across client value
chains and services that span the security lifecycle,
Accenture protects organization’s valuable assets,
end-to-end. With services that include strategy
and risk management, cyber defense, digital
identity, application security and managed security,
Accenture enables businesses around the world
to defend against known sophisticated threats,
and the unknown. Follow us @AccentureSecure on
Twitter or visit the Accenture Security blog.
Learn more:
http://accenture.com/security