2020 Travelers Risk Index finds fewer companies taking steps to mitigate cyber threats despite increased concern

September 29, 2020

The Travelers Companies, Inc. announced the results of the 2020 Travelers Risk Index, which found that fewer companies than last year have taken steps to mitigate cyber risks, even though the level of concern about these threats has increased during the COVID-19 pandemic.

More than 1,200 business leaders participated in the national survey, and less than half said their organization has utilized hacker intrusion detection software (48%), undergone a cyber risk assessment on their company (47%) or vendors (37%), or written a business continuity plan that could help them respond to a cyber attack (42%). More business leaders reported taking each of these precautions just a year ago. This is especially concerning as nearly 1 in 4 respondents (22%) said their company was a victim of a cyber event, the highest percentage since the survey began in 2014.

While broad economic uncertainty is the greatest worry for businesses overall, cyber threats are the top concern for large and medium-sized businesses. Cyber also ranked first by companies in the healthcare, technology, nonprofit and public sector industries. The leading cyber concerns among all respondents are:

Suffering a security breach (52% worry some or a great deal)
Unauthorized access to financial systems (50%)
Employees putting company information at risk (48%)
Becoming a cyber extortion/ransomware victim (47%)
Theft of the company’s customer or client records (47%)
Suffering a cyber event due to employees working remotely (47%)

These concerns appear to be driven, in part, by the impact of COVID-19 on businesses’ operations and workforces. The percentage of businesses reporting that at least 40% of their employees work outside of the office has more than doubled during the pandemic, from 26% to 59%. Consequently, businesses find that they need to manage a new set of cyber threats.

“With more employees relying on their ability to connect with company systems from remote locations, and many consumers preferring online transactions in an age of social distancing, it’s more important than ever for companies to do all they can to mitigate exposure to cyber threats,” said Tim Francis, Enterprise Cyber Lead at Travelers. “Taking appropriate precautions and having a plan in place should something go wrong will put an organization in position to seamlessly get back up and running. This is critical in ensuring that employees will be able to continue to access systems and maintain productivity, while also delivering a high level of service to customers.”

The survey also found that current events are influencing perceptions about the business environment in general; the percentage of respondents who say the business environment is becoming riskier is up significantly, from 36% in 2019 to nearly half (47%) this year. The top five risks concerning businesses of all sizes this year are:

Broad economic uncertainty (57% worry some or a great deal)
Cyber risks (56%)
Medical cost inflation (54%)
Increasing employee benefits costs (52%)
Ability to attract and retain talent (47%)

For more information, visit the 2020 Travelers Risk Index website.

How can you advance your career in the security industry with the skills and competencies necessary to benefit your organization? What will the security executive and the security function of the future look like? Join us as we hear from veterans in the security industry about their experiences, their lessons learned, and best practices for advancing their careers.