Skip to main content
MENU
Subscribe
  • Sign Up Free
  • LOGIN
  • Subscribe
  • Topics
    • Alternatives
    • Consultants
    • Coronavirus
    • Courts
    • Defined Contribution
    • ESG
    • ETFs
    • Face to Face
    • Hedge Funds
    • Industry Voices
    • Investing
    • Money Management
    • Opinion
    • Partner Content
    • Pension Funds
    • Private Equity
    • Real Estate
    • Russia-Ukraine War
    • SECURE 2.0
    • Special Reports
    • White Papers
  • Rankings & Awards
    • 1,000 Largest Retirement Plans
    • Top-Performing Managers
    • Largest Money Managers
    • DC Money Managers
    • DC Record Keepers
    • Largest Hedge Fund Managers
    • World's Largest Retirement Funds
    • Best Places to Work in Money Management
    • Excellence & Innovation Awards
    • WPS Innovation Awards
    • Eddy Awards
  • ETFs
    • Latest ETF News
    • Fund Screener
    • Education Center
    • Equities
    • Fixed Income
    • Commodities
    • Actively Managed
    • Alternatives
    • ESG Rated
  • ESG
    • Latest ESG News
    • The Institutional Investor’s Guide to ESG Investing
    • ESG Sustainability - Gaining Momentum
    • Climate Change: The Inescapable Opportunity
    • Impact Investing
    • 2022 ESG Investing Conference
    • ESG Rated ETFs
  • Defined Contribution
    • Latest DC News
    • DC Money Manager Rankings
    • DC Record Keeper Rankings
    • Innovations in DC
    • Trends in DC: Focus on Retirement Income
    • 2022 Defined Contribution East Conference
    • 2022 DC Investment Lineup Conference
  • Searches & Hires
    • Latest Searches & Hires News
    • Searches & Hires Database
    • RFPs
  • Performance Data
    • P&I Research Center
    • Earnings Tracker
    • Endowment Returns Tracker
    • Corporate Pension Contribution Tracker
    • Pension Fund Returns Tracker
    • Pension Risk Transfer Database
    • Future of Investments Research Series
    • Charts & Infographics
    • Polls
  • Careers
  • Events
    • View All Conferences
    • View All Webinars
    • 2023 Defined Contribution East
    • 2023 ESG Investing
Breadcrumb
  1. Home
  2. CYBERSECURITY
May 01, 2019 01:00 AM

Financial services firms spend 6% to 14% of IT budget on cybersecurity – survey

James Comtois
  • Tweet
  • Share
  • Share
  • Email
  • More
    Reprints Print
    Getty Images/iStockphoto

    Asset managers and other financial service firms spend roughly $2,300 per full-time employee on cybersecurity a year, said a results of a survey released Wednesday by Deloitte and the Financial Services Information Sharing and Analysis Center.

    The survey report, "Pursuing Cybersecurity Maturity at Financial Institutions," reveals that banks, insurance companies, investment managers and other financial services companies spend between 6% and 14% of their annual information technology budget on cybersecurity, for an average of 10%. This equals roughly 0.2% to 0.9% of company revenue, or between $1,300 to $3,000 on cybersecurity per full-time or equivalent employee.

    The report looked at various components of a financial institution's cybersecurity operation, including how it is organized and governed, who the chief information security officer reports to, the level of board interest in the CISO's work and which cyber capability areas were prioritized in terms of spending.

    Responses from the survey reveal that larger firms allocated nearly one-fifth of their cybersecurity budget to identity and access management. This is nearly twice the percentage of smaller and midsize firms, which tend to spend more on endpoint and network security.

    "Of course, money alone is not the answer — as we found in the study, higher cybersecurity spending doesn't necessarily translate into a higher cybersecurity maturity level," said Julie Bernard, a principal with Deloitte's risk and financial advisory unit and insurance sector leader for cyberrisk services at Deloitte & Touche, in a news release announcing the survey results. "While everyone is looking for an efficiency ratio for their cyber costs, how a security program is planned, executed and governed is as important, if not more."

    The most successful programs exhibit several core traits, including setting a tone at the top of an organization, with both executives and the board; raising cybersecurity's profile beyond the IT department to give the security function higher-level attention and greater clout; and aligning cybersecurity efforts with the company's business strategy.

    Survey respondents identified keeping up with the rapid changes and rising complexities of IT as the biggest challenge in managing cybersecurity, followed closely by business growth and expansion.

    The survey was conducted in the fall of 2018 by FS-ISAC in conjunction with Deloitte's cyberrisk services practice. Ninety-seven companies participated, with 39% of those reporting revenue of more than $2 billion annually, while 23% were classified as midsize, with annual revenue between $500 million and $2 billion.

    Related Articles
    Cybersecurity must be top priority for all institutions
    Cybersecurity 'patchwork' leaving industry vulnerable
    Majority of cybersecurity incidents go unreported to SEC, analysis finds
    Cybersecurity still key issue for record keepers
    Financial firms failing to keep customer data secure – OCIE
    Recommended for You
    ONLINE_190219935_AR_0_LOVNYGAFDXAZ.jpg
    Missouri Public Schools experiences email breach
    Will Hansen
    DOL guidance welcomed but some want it to go further
    San Francisco data breach could affect 74,000 participants
    San Francisco data breach could affect 74,000 participants
    Research for Institutional Money Management
    Sponsored Content: Research for Institutional Money Management

    Reader Poll

    January 25, 2023
    SEE MORE POLLS >
    Sponsored
    White Papers
    The Future of Infrastructure: Building a Better Tomorrow
    Fulcrum Issues: Equity Returns and Inflation — Choose Your Own Adventure
    What Matters Most in Considering a Private Debt Strategy
    Why pursue direct lending in the core middle market?
    Research for Institutional Money Management
    Are Factors a Thing of the Past?
    View More
    Sponsored Content
    Partner Content
    The Industrialization of ESG Investment
    For institutional investors, ETFs can make meeting liquidity needs easier
    Gold: the most effective commodity investment
    2021 Investment Outlook | Investing Beyond the Pandemic: A Reset for Portfolios
    Ten ways retirement plan professionals add value to plan sponsors
    Gold: an efficient hedge
    View More
    E-MAIL NEWSLETTERS

    Sign up and get the best of News delivered straight to your email inbox, free of charge. Choose your news – we will deliver.

    Subscribe Today
    December 12, 2022 page one

    Get access to the news, research and analysis of events affecting the retirement and institutional money management businesses from a worldwide network of reporters and editors.

    Subscribe
    Connect With Us
    • RSS
    • Twitter
    • Facebook
    • LinkedIn

    Our Mission

    To consistently deliver news, research and analysis to the executives who manage the flow of funds in the institutional investment market.

    About Us

    Main Office
    685 Third Avenue
    Tenth Floor
    New York, NY 10017-4036

    Chicago Office
    130 E. Randolph St.
    Suite 3200
    Chicago, IL 60601

    Contact Us

    Careers at Crain

    About Pensions & Investments

     

    Advertising
    • Media Kit
    • P&I Content Solutions
    • P&I Careers | Post a Job
    • Reprints & Permissions
    Resources
    • Subscribe
    • Newsletters
    • FAQ
    • P&I Research Center
    • Site map
    • Staff Directory
    Legal
    • Privacy Policy
    • Terms and Conditions
    • Privacy Request
    Pensions & Investments
    Copyright © 1996-2023. Crain Communications, Inc. All Rights Reserved.
    • Topics
      • Alternatives
      • Consultants
      • Coronavirus
      • Courts
      • Defined Contribution
      • ESG
      • ETFs
      • Face to Face
      • Hedge Funds
      • Industry Voices
      • Investing
      • Money Management
      • Opinion
      • Partner Content
      • Pension Funds
      • Private Equity
      • Real Estate
      • Russia-Ukraine War
      • SECURE 2.0
      • Special Reports
      • White Papers
    • Rankings & Awards
      • 1,000 Largest Retirement Plans
      • Top-Performing Managers
      • Largest Money Managers
      • DC Money Managers
      • DC Record Keepers
      • Largest Hedge Fund Managers
      • World's Largest Retirement Funds
      • Best Places to Work in Money Management
      • Excellence & Innovation Awards
      • WPS Innovation Awards
      • Eddy Awards
    • ETFs
      • Latest ETF News
      • Fund Screener
      • Education Center
      • Equities
      • Fixed Income
      • Commodities
      • Actively Managed
      • Alternatives
      • ESG Rated
    • ESG
      • Latest ESG News
      • The Institutional Investor’s Guide to ESG Investing
      • ESG Sustainability - Gaining Momentum
      • Climate Change: The Inescapable Opportunity
      • Impact Investing
      • 2022 ESG Investing Conference
      • ESG Rated ETFs
    • Defined Contribution
      • Latest DC News
      • DC Money Manager Rankings
      • DC Record Keeper Rankings
      • Innovations in DC
      • Trends in DC: Focus on Retirement Income
      • 2022 Defined Contribution East Conference
      • 2022 DC Investment Lineup Conference
    • Searches & Hires
      • Latest Searches & Hires News
      • Searches & Hires Database
      • RFPs
    • Performance Data
      • P&I Research Center
      • Earnings Tracker
      • Endowment Returns Tracker
      • Corporate Pension Contribution Tracker
      • Pension Fund Returns Tracker
      • Pension Risk Transfer Database
      • Future of Investments Research Series
      • Charts & Infographics
      • Polls
    • Careers
    • Events
      • View All Conferences
      • View All Webinars
      • 2023 Defined Contribution East
      • 2023 ESG Investing