Originally published on Findlaw.com
The Second Annual Cost of Cyber Crime Study by the Ponemon Institute makes plain that cyber attacks are not going away and are financially painful for victim companies. Indeed, the median annualized cost of cyber crime for a company is $5.9 million, with a range of between $1.5 million $36.5 million per company. This represents a 56% increase from the 2010 median cost.
It is no wonder that cyber crime comes with a serious price tag for victim companies, as cyber attacks occur on a frequent basis. During just a four-week period, the companies that were part of the study suffered 72 successful attacks per week - a 45% increase from 2010. The vast majority of the attacks consisted of malicious code, denial of service, web-based attacks and stolen devices.
Detection and recovery are the most expensive aspects of internal cyber crime costs, according to the study. This suggests significant cost reduction potential for companies that are able to implement security technology that automates detection and recovery.
Interestingly, the average time to resolve a cyber attack is 18 days, according to the study. Time equals money, because attacks that are resolved earlier are far less costly. And some malicious insider attacks can take as long as 45 days to contain, certainly adding to the bottom line.
The study indicates that companies that deploy advanced security intelligence and risk management measures lessen the impact of cyber crime. The costs of grappling with attacks can be reduced by as much as 25% if such measures are put in place.
It appears that cyber crime is here to stay, and companies need to be smart and fast to mitigate the costs of cyber attacks.
Eric Sinrodis a partner in theSan Franciscooffice ofDuane Morris. His focus includes information technology and intellectual property disputes. To receive his weekly columns, send an e-mail toejsinrod@duanemorris.comwith the word "Subscribe" in the subject line.
This article is for general information and does not include full legal analysis of the matters presented. It should not be construed or relied upon as legal advice or legal opinion on any specific facts or circumstances. The description of the results of any specific case or transaction contained herein does not mean or suggest that similar results can or could be obtained in any other matter. Each legal matter should be considered to be unique and subject to varying results. The invitation to contact the authors or attorneys in our firm is not a solicitation to provide professional services and should not be construed as a statement as to any availability to perform legal services in any jurisdiction in which such attorney is not permitted to practice.
Duane Morris LLP, a full-service law firm with more than 700 attorneys in 24 offices in the United States and internationally, offers innovative solutions to the legal and business challenges presented by today's evolving global markets. Duane Morris LLP, a full-service law firm with more than 700 attorneys in 24 offices in the United States and internationally, offers innovative solutions to the legal and business challenges presented by today's evolving global markets. The Duane Morris Institute provides training workshops for HR professionals, in-house counsel, benefits administrators and senior managers.
