亚太地区网络安全行业市场前景及投资研究报告-培训课件外文版2024.5saas

DIGITAL

&

TRENDSCybersecurityandcybercrimeintheAsia-PacificregionCHAPTER

01OverviewMostcommonlyreportedcybercrimecategoriesintheUnitedStatesin2022,bynumberofindividualsaffectedMostreportedcybercrimeintheU.S.2022,bynumberofindividualsaffectedNumberofindividualsaffected100,000

150,000050,000200,000250,000300,000350,000PhishingPersonaldatabreachNon-payment/Non-deliveryExtortion300,49758,85951,67939,41632,538TechSupportInvestmentIdentitytheft30,52927,922CreditCard/CheckFraudBECSpoofingConfidencefraud/romanceEmployment22,98521,83220,64919,02114,94611,779Harassment/Stalking3Description:In2022,themostcommontypeofcybercrimereportedtotheUnitedStatesInternetCrimeComplaintCenterwasphishing,affectingapproximately300thousandindividuals.Inaddition,nearly59thousandcasesofpersonaldatabreachescaseswerereportedtotheIC3duringthatyear.ReadmoreNote(s):UnitedStates;2022;crimesreportedtoIC3;widerindustrymetrixmayvarySource(s):FBI;IC3Countriesmosttargetedbyphishingattacksworldwidein2022Phishing:distributionofattacks2022,bycountryShareofattackedusers0%2%4%6%8%10%12%14%16%18%17.03%VietnamMacau13.88%MadagascarAlgeria12.04%11.05%EcuadorMalawi11.05%10.91%Brunei10.59%Brazil10.57%10.43%10.33%MoroccoPortugal4Description:In2022,usersinVietnamweremostfrequentlytargetedbyphishingattacks.Thephishingattackrateamonginternetusersinthecountrywas17.03percent.Intheexaminedyear,Macaowasthesecondregion,withanattackrateofnearly14percent,whileMadagascarfollowedwith12percent.ReadmoreNote(s):Worldwide;2022;shareofusersencounteringphishingoutofthetotalnumberofKasperskyusersinthatcountry/territorySource(s):KasperskyLabNumberofdatarecordsexposedworldwidefrom1stquarter2020to1stquarter2023(inmillions)GlobalnumberofbreacheddatasetsQ12020-Q12023140125.7412010095.5879.528068.99604020019.4219.3314.114.7810.0910.456.415.543.33Q12020Q22020Q32020Q42020Q12021Q22021Q32021Q42021Q12022Q22022Q32022Q42022Q120235Description:Duringthefirstquarterof2023,morethansixmilliondatarecordswereexposedworldwidethroughdatabreaches.Sincethefirstquarterof2020,thehighestnumberofexposeddatarecordswasdetectedinthefourthquarterof2020,nearly125milliondatasets.ReadmoreNote(s):Worldwide;Q12020toQ12023;Basedonthesourcecharacteristics,widerindustrymetricsmayvary.Source(s):SurfSharkAveragecostofadatabreachworldwidefromMarch2022toMarch2023,bycountryorregion(inmillionU.S.dollars)Averagetotalcostperdatabreachworldwide2023,bycountryorregionCostinmillionU.S.dollars012345678910UnitedStatesMiddleEastCanada9.488.075.13Germany4.674.524.45JapanGlobalaverageUnitedKingdomFrance4.214.083.863.693.48ItalyLatinAmericaSouthKoreaASEAN3.05SouthAfrica2.796Description:Asof2023,theUnitedStatesrankedfirstbytheaveragecostofadatabreach,9.48millionU.S.dollars.TheaveragecostofdatabreachesintheMiddleEastis8.07millionU.S.dollars.Canadafollowedintheranking,with5.13millionU.S.dollars.Inthemeasuredperiod,theglobalaveragedatabreachcostwas4.45millionU.S.dollars.ReadmoreNote(s):Worldwide;March2022toMarch2023Source(s):IBM;PonemonInstituteDistributionofcyberattacksacrossworldwideindustriesin2022Shareofcyberattacksinglobalindustriesworldwide2022Shareofcyberattacks0%5%10%15%20%25%24.8%30%ManufacturingFinanceandinsuranceProfessional,business,andconsumerservicesEnergy18.9%14.6%10.7%RetailandwholesaleEducation8.7%7.3%Healthcare5.8%4.8%3.9%GovernmentTransportationMediaandtelecom0.5%7Description:In2022,manufacturinghadthehighestshareofcyberattacksamongtheleadingindustriesworldwide.Duringtheexaminedyear,cyberattacksinmanufacturingcompaniesaccountedfornearly25percentofthetotalcyberattacks.Financeandinsurancefollowedwitharound19percent.Professional,business,andconsumerservicesrankedthirdwithashareof14.6percent.ReadmoreNote(s):Worldwide;2022Source(s):IBMDistributionofcyberattacksinselectedglobalregionsin2022,bycategoryShareofcyberattacksinworldwideregions2022,bycategoryMultipurposemalwareInfostealersCrypto-minersMobileRansomware140%120%100%80%60%40%20%0%9%14%25%30%7%9%8%8%15%16%5%7%12%25%24%18%44%32%33%23%GlobalAmericasEMEAAPAC8Description:In2022,multipurposemalware,whichincludesbankingTrojansandbotnets,wasthemostfrequentlyreportedcategoryofcyberattack.Thistypeofmalwareaccountedfor32percentofgloballyreportedattacksand44percentofattacksintheAsia-Pacific(APAC)region.Infostealersrankedsecond,recordingthehighestpercentageintheAPACregionat30percent.Amongthereportedcategories,ransomwarehadthelowestshareacrossallregionsworldwide,rangingfromfivetoninepercent.

ReadmoreNote(s):Worldwide;2022Source(s):CheckPointSoftwareTechnologiesCHAPTER

02APACoverviewNationalcybersecurityindexrankingintheAsia-PacificregionasofJuly2023NationalcybersecurityindexrankingAPAC2023,bycountryIndexscore(0-100)4001020305060708090MalaysiaSingaporeSouthKoreaBangladeshAustraliaThailandPhilippinesIndonesiaJapan79.2271.4368.8367.5366.2364.9463.6463.6463.64India59.74ChinaNewZealandSriLanka51.9551.9544.1610Description:AsofJuly2023,MalaysiareachedthehighestscoreontheNationalCyberSecurityIndexamongcountriesintheAsia-Pacificregion,79.22outof100.Incontrast,Myanmarreceived10.39indexpoints,thelowestscoreacrossAPAC.

ReadmoreNote(s):Asia,APAC;asofJuly2023Source(s):NCSIRevenueofthecybersecuritymarketintheAsia-Pacificregionfrom2017to2022,withforecaststo2026,bysubregion(inbillionU.S.dollars)CybersecurityrevenueAPAC2017-2026,bysubregionAustraliaandOceaniaEastAsiaSoutheastAsiaSouthAsia60504030201002017201820192020202120222023*2024*2025*2026*11Description:In2022,thecybersecuritymarketinEastAsiageneratedapproximately24.5billionU.S.dollarsinrevenue,makingitthelargestcybersecuritymarketintheAsia-Pacificregion.AustraliaandOceaniafollowedwitharound3.8billiondollarsincybersecurityrevenue.ReadmoreNote(s):Asia,APAC;2017to2022;*ForecastAllvaluesaremodeledestimates.ThemarketforCybersecurityincludesrevenuesgeneratedbythetwokeyproducts,namelyCyberSolutionandSecurityServices.Reportedmarketrevenuesinclude[...]

ReadmoreSource(s):TechnologyMarketInsightsRevenuegrowthofthecybersecuritymarketintheAsia-Pacificregionfrom2017to2022,withforecaststo2026,bysubregionCybersecurityrevenuegrowthAPAC2017-2026,bysubregionAustraliaandOceaniaEastAsiaSoutheastAsiaSouthAsia25%20%15%10%5%0%2017201820192020202120222023*2024*2025*2026*12Description:In2022,thecybersecuritymarketinSouthAsiagrewbyjustoverninepercent.Thisrepresentedasignificantslowdownfromthepreviousyear,whenthesubregion'scybersecuritymarketrevenuegrewby20percent.

ReadmoreNote(s):Asia,APAC;2017to2022;*ForecastAllvaluesaremodeledestimates.ThemarketforCybersecurityincludesrevenuesgeneratedbythetwokeyproducts,namelyCyberSolutionandSecurityServices.Reportedmarketrevenuesinclude[...]

ReadmoreSource(s):

TechnologyMarketInsightsLargestcybersecuritymarketsintheAsia-Pacificregionin2022,byrevenue(inmillionU.S.dollars)LargestcybersecuritymarketsAPAC2022,byrevenueMarketrevenueinmillionU.S.dollars6,000

8,00002,0004,00010,00012,00014,000ChinaJapan12,6308,259AustraliaSouthKoreaIndia3,3702,8322,1631,834IndonesiaNewZealandSingaporeMalaysia422.3405.1403.5Thailand283.4Vietnam225.2176.2158.7140.8PhilippinesBangladeshPakistan13Description:In2022,China'scybersecuritymarketgeneratedanestimated12.63billionU.S.dollarsinrevenue,makingitthelargestmarketacrosstheAsia-Pacificregion.Japan,theregion'ssecondlargestcybersecuritymarket,generatedaround8.26billionU.S.dollarsthatyear.ReadmoreNote(s):Asia,APAC;asofMarch2023Source(s):TechnologyMarketInsightsRevenuegrowthofthecybersecuritymarketintheAsia-Pacificregionfrom2020to2022,withforecaststo2025,bycountryCybersecuritymarketgrowthAPAC2020-2025,byrevenueAustraliaChinaIndiaIndonesiaJapanMalaysiaNewZealandSingaporeSouthKoreaThailand25%20%15%10%5%0%-5%-10%2020202120222023*2024*2025*14Description:In2022,Malaysia'scybersecuritymarketgrewby14.7percent,thehighestgrowthamongtheselectedmarketsintheAsia-Pacificregion.Incontrast,cybersecurityrevenueinJapandecreasedby3.8percentthatyear.

ReadmoreNote(s):Asia,APAC;2020to2022;*ForecastAllvaluesaremodeledestimates.ThemarketforCybersecurityincludesrevenuesgeneratedbythetwokeyproducts,namelyCyberSolutionandSecurityServices.Reportedmarketrevenuesinclude[...]

ReadmoreSource(s):TechnologyMarketInsightsRevenueofcybersolutionsmarketsegmentsintheAsia-Pacificregionin2022,byselectedcountry(inmillionU.S.dollars)RevenueofcybersolutionsAPAC2022,bysegmentandcountryApplicationsecurityCloudsecurityDatasecurityNetworksecurityOthersolutions9,0008,0007,0006,0005,0004,0003,0002,0001,0000ChinaJapanSouthKoreaAustraliaIndia15Description:In2022,networksecuritywasthelargestcybersolutionssegmentinChina,generatingaround3.56billionU.S.dollarsinrevenue.Thatyear,China'scybersolutionsmarketrevenueamountedtoapproximately8.47billiondollars.

ReadmoreNote(s):Asia,APAC;asofMarch2023Source(s):TechnologyMarketInsightsSpendingshareoncybersecuritysolutionsintheAsia-PacificregionasofFebruary2023,bysectorSpendingshareoncybersecuritymeasuresAPAC2023,bysectorBanking16.0%Telecommunications12.3%Others45.8%Federal/centralgovernment11%State/localgovernment9.1%DiscreteManufacturing6.3%16Description:AsofFebruary2023,governmentalinstitutionsaccountedforapproximately20percentofthetotalspendoncybersecuritysolutionsintheAsia-Pacificregion.Atthesametime,thebankingsectoraccountedforover15percentofcybersecurityspendinginAPAC.ReadmoreNote(s):Asia,APAC;asofFebruary2023;excludingJapan;dataisbasedonabusinesssurveyacross20industries,coveringcompaniesacrossfivedifferentsizesegmentsSource(s):IDCCHAPTER

03DatabreachesTotalnumberofaccountsexposedinonlinedatabreachesintheAsia-Pacificregionin2021and2022,bysubregionNumberofbreachedaccountsAPAC2021-2022,bysubregionAsiaOceania400,000,000350,000,000300,000,000250,000,000200,000,000150,000,000100,000,00050,000,00002021202218Description:In2022,thenumberofaccountbreachesinAsiaamountedtoaround74.2million.Thismarkedasignificantdecreasefromthepreviousyear,whencloseto324millionaccountswerebreachedacrosstheregion.AsimilardownwardtrendcouldbeobservedinOceania,withthenumberofbreachedaccountshavingdeclinedbyovertenmillionfrom2021to2022.ReadmoreNote(s):Asia,AustraliaandOceania,APAC;2021and2022;basedonthesourcecharacteristics;widerindustrymetricsmayvarySource(s):SurfSharkNumberofaccountsexposedinonlinedatabreachesintheAsia-Pacificregionin2021and2022,bycountryorterritoryNumberofbreachedaccountsAPAC2021-2022,bycountry202123444865399332178625340964577996910141335262639185314957362022340323721474155447390393381898289296725308111939620150575411936451022938941157ChinaIndonesiaIndiaAustraliaTaiwanSouthKoreaJapanSriLankaPhilippinesMalaysiaThailandVietnamHongKong4000411283874532978074981052159647486327477441819Description:In2022,morethan34millionaccountswerebreachedinChina,thehighestnumberacrosstheAsia-Pacificregion.Incontrast,thenumberofaccountsbreachedinPapuaNewGuineaamountedtojustover5.1thousandthatyear.

ReadmoreNote(s):Asia,APAC;2021and2022;basedonthesourcecharacteristics;widerindustrymetricsmayvarySource(s):SurfSharkOnlineaccountbreachdensityintheAsia-Pacificregionin2021and2022,bysubregion(per1,000population)OnlinedatabreachdensityAPAC2021-2022,bysubregionAsiaOceania40035635030025020015010011670500162021202220Description:In2022,thedensityofaccountbreachesinOceaniaamountedto116per1,000population,comparedto16per1,000acrossAsia.Inbothregions,thedensityofaccountbreachesdecreasedsignificantlyfrom2021to2022.

ReadmoreNote(s):Asia,AustraliaandOceania,APAC;2021and2022;basedonthesourcecharacteristics;widerindustrymetricsmayvarySource(s):SurfSharkOnlineaccountbreachdensityintheAsia-Pacificregionin2021and2022,bycountryorterritory(per1,000population)OnlinedatabreachdensityAPAC2021-2022,bycountry202137840721323202213312110370AustraliaTaiwanHongKongSriLankaIndonesiaSouthKoreaSingaporeMalaysiaNewZealandChina155426033988494732300162824Japan3115ThailandPhilippines4713371121Description:In2022,thedensityofaccountbreachesinAustraliaamountedto133per1,000population,thehighestdensityacrosstheAsia-Pacificregionthatyear.However,thismarkedasignificantdecreasefromthepreviousyear,whenAustraliarankedsecondacrossAPACwithanaccountbreachdensityof378per1,000population.ReadmoreNote(s):Asia,APAC;2021and2022;basedonthesourcecharacteristics;widerindustrymetricsmayvarySource(s):SurfSharkCHAPTER

04CybersecurityatcompaniesSelf-assessedcybersecuritymaturitylevelatcompaniesintheAsia-Pacificregionin2022,bycountryCybersecuritymaturitylevelatcompaniesAPAC2022,bycountryNoplan33%InitialManagedDefinedQuantitativelymanagedOptimizing31%35%30%25%20%15%10%5%31%31%29%31%30%28%26%25%25%21%23%21%21%21%20%18%18%18%17%14%12%11%10%9%8%7%6%3%3%3%1%1%0%0%0%AustraliaIndiaJapanMalaysiaPhilippinesSingapore23Description:InaJuly2022surveyoncybersecurityconductedatcompaniesacrossAsia,28percentofcompaniesinAustraliabelievedtoachieveoptimizinglevelsofcybersecuritymaturityin2022.Thatyear,around21percentofcompaniesinIndiareportedthesamelevelofmaturity.ReadmoreNote(s):Asia,APAC;2022;900respondents;amongcybersecuritydecisionmakers;100respondentseachfromMalaysia,Philippines,andSingapore;200respondentseachfromAustralia,India,andJapanSource(s):SophosStaffinchargeofcybersecuritystrategyleadershipatcompaniesintheAsia-Pacificregionin2022CybersecurityleadershipAPAC2022Allmanagementandexecutives31%CISO35%CIO,CTO,orITDirector34%24Description:Ina2022surveyoncybersecurityconductedatcompaniesacrossAsia,35percentofthecompaniesstatedthattheircybersecuritystrategywasleadbyachiefinformationsecurityofficer(CISO).In31percentofthecompanies,thestrategywasleadbyallmanagementandexecutivemembers.ReadmoreNote(s):Asia,APAC;2022;900respondents;amongcybersecuritydecisionmakers;100respondentseachfromMalaysia,Philippines,andSingapore;200respondentseachfromAustralia,India,andJapanSource(s):SophosLeadingstaffmembersresponsibleforcybcersecurityatcompaniesintheAsia-Pacificregionin2022StaffmemberstaskedwithcybersecurityatcompaniesAPAC2022Shareofrespondents5%

10%0%15%20%25%30%Dedicatedsecurityteam26.3%Dedicatedsecurityspecialists(withintheITteam)ITstaff(inadditiontotheirusualresponsibilities)Dedicatedsecurityspecialists(outsidetheITteam)Regularstaff(inadditiontotheirusualresponsibilities)23.1%19.8%17.3%14.2%25Description:AccordingtoaJuly2022surveyoncybersecurityconductedatcompaniesacrossAsia,26percentofthecompanieshadadedicatedteamtaskedwithcybersecurity.Incontrast,14percentofthecompanieshadregularstaffmemberstakeoncybersecurityinadditiontotheirday-to-dayresponsibilities.ReadmoreNote(s):Asia,APAC;2022;900respondents;amongcybersecuritydecisionmakers;100respondentseachfromMalaysia,Philippines,andSingapore;200respondentseachfromAustralia,India,andJapanSource(s):Sophos;estimatesLeadingmeasuresimplementedinresponsetocyberincidentsatcompaniesintheAsia-Pacificregionin2022TopcyberincidentsresponsemeasuresatcompaniesAPAC2022Shareofrespondents0%10%20%30%40%50%60%70%68%80%Regulartrainingexercisesand/ortabletopexercisesAnincidentresponseplaybook/planand/orpoliciesAcompromiserecoveryplan64%62%Anappointeddataprotectionofficer62%62%CybersecurityspecialistsonaretainerCrisiscommittee59%CyberinsurancewhichwillprovideavettedincidentresponsecapabilityOutsourcingcybersecurityfunctions(e.g.vCISO)Buyingcyberinsurance53%52%52%26Description:Accordingtoa2022cybersecuritysurveyconductedamongcompaniesintheAsia-Pacificregion,regulartrainingexerciseswerethemostpopularresponsemeasureagainstcyberincidentsat68percent.Incomparison,cyberinsurancewaspurchasedby52percentoftherespondents.ReadmoreNote(s):Asia,APAC;MarchandApril2022;700respondents;amongcompanydecision-makersinIT,risk,security,andlegalprofessionsfromAustralia,HongKong,Indonesia,Japan,Malaysia,Philippines,andSingapore*;*Around100respondents[...]

ReadmoreSource(s):KrollCybersecurityexpenditureasashareoftotaltechnologybudgetofcompaniesintheAsia-Pacificregionin2022,byselectedcountryCompanies'cybersecurityspendasshareoftechbudgetAPAC2022,bycountryShareoftotaltechnologybudget0%2%4%6%8%10%12%14%13.3%PhilippinesJapan12.3%AustraliaSingaporeIndia11.8%11.23%10.7%Malaysia8.6%27Description:AccordingtoaJuly2022surveyoncybersecurityconductedatcompaniesacrossAsia,companiesinthePhilippinesspentover13percentoftheirtechnologybudgetoncybersecurity.Incontrast,cybersecurityexpensesmadeuplessthanninepercentofthetechbudgetatMalaysiancompanies.ReadmoreNote(s):Asia,APAC;2022;900respondents;amongcybersecuritydecisionmakers;100respondentseachfromMalaysia,Philippines,andSingapore;200respondentseachfromAustralia,India,andJapanSource(s):SophosLeadingusesofartificialintelligenceandmachinelearningforcybersecurityatcompaniesintheAsia-Pacificregionin2022TopusesofAIandMLincybersecurityAPAC2022Shareofrespondents0%5%10%15%20%25%UsedforanalysisofcollecteddataUsedforproactivedefenseorfraudmitigationUsedtoscanandtestsystemvulnerabilitiesUsedtoprovidestrategyrecommendationsNotused22%19%19%16%11%Usedinthreathunting13%28Description:InaJuly2022surveyoncybersecurityconductedatcompaniesacrossAsia,around22percentofcompaniesusedartificialintelligenceandmachinelearningtoanalyzecollecteddata.Incontrast,11percentofthesurveyedcompaniesstatednottouseAIorMLforcybersecuritymeasuresattheircompany.ReadmoreNote(s):Asia,APAC;2022;900respondents;amongcybersecuritydecisionmakers;100respondentseachfromMalaysia,Philippines,andSingapore;200respondentseachfromAustralia,India,andJapanSource(s):SophosCHAPTER

05CyberincidentsatcompaniesShareofbusinessesthathaveexperiencedcyberincidentsintheAsia-Pacificregionin2022,bycountryorterritoryShareofcompanieswithcyberincidentexperienceAPAC2022,bycountryShareofrespondents0%10%20%30%40%50%60%70%80%MalaysiaPhilippinesAustraliaIndonesiaJapan76%75%72%52%50%SingaporeHongKong46%43%30Description:Accordingtoa2022cybersecuritysurveyconductedamongcompaniesintheAsia-Pacificregion,76percentofsurveyedbusinessesinMalaysiahadpreviouslyexperiencedcyberincidents.Incontrast,lessthanhalfoftherespondingbusinessesinHongKongandSingaporehadbeenimpactedbycyberincidents,respectively.ReadmoreNote(s):Asia,APAC;MarchandApril2022;700respondents;amongcompanydecision-makersinIT,risk,security,andlegalprofessionsfromAustralia,HongKong,Indonesia,Japan,Malaysia,Philippines,andSingapore*;*Around100respondents[...]

ReadmoreSource(s):KrollLeadingconcernsregardingcyberattacksatcompaniesintheAsia-Pacificregionin2022TopconcernsregardingcyberattacksatcompaniesAPAC2022Shareofrespondents20%

30%0%10%40%50%60%58%70%70%80%DatalossBusinessinterruptionReputationaldamage50%ExfiltrationortheftofintellectualpropertyCostsincurred49%44%Ransompayment35%Finesarisingfromregulatorysanctions29%31Description:Accordingtoa2022cybersecuritysurveyconductedamongcompaniesintheAsia-Pacificregion,datalosswastheleadingconcernheldregardingcyberattacks,assharedby70percentoftherespondents.Incomparison,29percentoftherespondentsstatedtobeworriedaboutfinesarisingfromregulatorysanctions.ReadmoreNote(s):Asia,APAC;MarchandApril2022;700respondents;amongcompanydecision-makersinIT,risk,security,andlegalprofessionsfromAustralia,HongKong,Indonesia,Japan,Malaysia,Philippines,andSingapore*;*Around100respondents[...]

ReadmoreSource(s):KrollLeadingcauseso