意大利网络安全公司市场前景及投资研究报告-培训课件外文版2024.6

INDUSTRIES

&

MARKETSTheimpactofcybercrimeoncompaniesinItalyCHAPTER

01OverviewEstimatedcostofcybercrimeworldwide2017-2028(intrillionU.S.dollars)Annualcostofcybercrimeworldwide2017-20281613.82141210812.4311.3610.299.228.157.085.49642.9521.160.860.702017201820192020202120222023202420252026202720284Description:Theglobalindicator'EstimatedCostofCybercrime'inthecybersecuritymarketwasforecasttocontinuouslyincreasebetween2023and2028byintotal5.7trillionU.S.dollars(+69.94percent).Aftertheeleventhconsecutiveincreasingyear,theindicatorisestimatedtoreach13.82trillionU.S.dollarsandthereforeanewpeakin2028.Notably,theindicator'EstimatedCostofCybercrime'ofthecybersecuritymarketwascontinuouslyincreasingoverthepastyears.

ReadmoreNote(s):Worldwide;2017to2028Source(s):TechnologyMarketInsightsMostfrequenttargetsofexternalcyberattacksworldwideasof2023Globalmostcommontargetsofexternalcyberattacks2023Shareofdevices0%5%10%15%20%25%30%35%InternetofThings(IoT)devicesEmployee-ownedmobiledeviceCorporate-ownedmobiledeviceCorporate-ownedcomputerEmployee-ownedcomputerPrivatecloudenvironmentsCorporatesocialmediaaccountPersonalsocialmediaaccountPubliccloudenvironmentsEmployee-ownedIoTdevicesOT/industrialcontrolsystemsCompanyproductsatcustomersitesCorporateserver33%28%28%27%26%25%23%22%22%21%21%17%17%Companywebsite16%Person13%5Description:Asof2023,InternetofThings(IoT)deviceswerethemostcommontargetsofexternalcyberattacks,with33percentofsuchdevicesencounteringcyberattacks.Employeeandcorporate-ownedmobiledevicesrankedsecond,with28percent,whilecorporate-ownedcomputersrankedthird,with27percentseeingexternalcyberattacks./p>ReadmoreNote(s):Worldwide;2023;acrossAndroidandiOS;datacollectedwithLookoutPhishingProtectionSource(s):ForresterResearch;VerizonMostimportantconsequencesofcyberattacksworldwideasofFebruary2023Mainconsequencesofcyberattacksworldwide2023Shareofrespondents10%0%CostsassociatedwithnotifingcustomersCausedabreachforthird-partypartnersNegativeimpactonbrandorreputationReductioninbusinessperformanceindicatorsLostcustomers5%15%20%25%30%35%31%26%25%24%21%21%SolvencyorviabilityofbusinesswasthreatenedGreaterdifficultyattractingnewcustomersFinethathadsignificantimpactonbusinessLostbusinesspartners20%16%16%Nothinghaschangedinpast12months12%6Description:Cyberattacksonbusinessesꢀarebecomingꢀmorefrequent,targeted,andcomplex.Theeffectsofacyberattackgowellbeyondthedirectfinancialconsequences.In2023,31percentofrespondentsindicatedincreasedcostsofnotifyingcustomersastheꢀmainconsequenceofcyberattacks.ReadmoreNote(s):Worldwide;January9toFebruary2,2023;5,005respondents;Basedonasurveyofexecutives,departmentalheads,ITmanagersandotherkeyprofessionalsSource(s):ForresterResearch;HiscoxNumberofreportedcasesofsignificantransomwareattacksinEuropefrom2021to2022KnownmajorransomwareattacksinEurope2021-2022250203200150100501090202120227Description:In2022,109significantransomwareattacksweredetectedinEurope,markinga46percentdropfrom203knownmajorransomwareattacksinthepreviousyear.Meanwhile,thefiguresdonotrepresentoverallnumberofransomwareattacksintheregion.Furthermore,in2022smallandmediumenterprises(SMEs)remainedtheprimarytargetforransomwareactors.ReadmoreNote(s):Europe;2021to2022;significantransomwareattacksonly;basedonsource'scharacteristics;widerindustrymetricsmaywarySource(s):ANSSIEstimatedannualcostofcybercrimeinItalyfrom2016to2028(inbillionU.S.dollars)AnnualcostofcybercrimeinItaly2016-202835030025020015010050322.223917512792.1566.05202345.19202232.421.79202013.9320198.013.284.1020162017201820212024*2025*2026*2027*2028*8Description:TheannualcostsofcybercrimeinItalyreachedanestimated66billionU.S.dollarsin2023.Between2016and2023,thisfigurehasseenasignificantincreaseofover60billionU.S.dollars.Accordingtothelatestestimates,thistrendwillcontinueinupcomingyears,reaching175billionU.S.dollarsincybercrimecostsby2026inthecountry.ReadmoreNote(s):Italy;2016to2023;*EstimatesDatashownisusingcurrentexchangeratesandreflectsmarketimpactsoftheRussia-Ukrainewar.ReadmoreSource(s):TechnologyMarketInsightsCHAPTER

02CyberattacksMostencounteredtypedofcybersecuritythreatsandattemptedcyberattacksforcompaniesinItalyasofJanuary2023MostcommoncyberthreatsdetectedinItaliancompanies2023Shareofrespondents0%10%20%30%40%50%60%70%80%90%100%110%PhishingMalware96%45%CEOfraud/businesse-mailcompromiseSmishing/vishing40%35%Compromise/theft/deviceLossIdentitytheft23%23%Ransomware22%20%18%Distributeddenialofservice(Resourcesaturation)Web-basedattacks/WebserviceslibraryattacksSQLinjection11%10%9%8%PrivilegeescalationAdvancedpersistentthreat(APT)Zero-dayattacks10Description:AccordingtoaJanuary2023surveyofmanagementandITprofessionalsworkinginItaliancompanies,phishingattackswerethemostcommoncyberthreatsencounteredintheprevious12months.Malwareattacksrankedsecond,withmorethanhalfofrespondentsreportingcompaniesencounteringthissecuritythreat.Additionally,approximately45percentofrespondentsreportedtheircompanyexperiencingbusinesse-mailcompromiseattacks.

ReadmoreNote(s):Italy;January2023;200respondents;attacksecounteredintheprevious12months;managementandITprofessionalsSource(s):TheInnovationGroup;Website(cybersecurityangels.it)DistributionshareofcyberattacksinItalyin1sthalf2023,bymotivationShareofcyberattacksinItaly2023,byreason90%83.9%80%70%60%50%40%30%20%10%0%7.7%6.4%1.9%CybercrimeHacktivismCyberespionage/sabotageCyberwarfare11Description:Duringthefirsthalfof2023,around84percentofcyberattackscarriedoutinItalyhadcybercrimeaspurpose.Cyberespionagewasanotherofthemotivations,representingthemainreasonbehindroughly6.4percentofattacks.Bycontrast,cyberwarfareaccountedfortwopercentofthecyberattacksinthecountryinthelastexaminedperiod.ReadmoreNote(s):Italy;H12023Source(s):AssociazioneItalianaperlaSicurezzaInformaticaShareofcyberattackvictimsinItalyin1sthalfof2023,bycategoryShareofcyberattackvictimsinItaly2023,bycategoryShareofvictims0%5%10%15%20%25%MultipletargetsHealthcare20%14.5%Gov/military/LEICTFinancial/insuranceEducation11.7%11.4%10.5%7.1%Maufacturing4.6%Professional/scientific/technicalNews/multimediaWholesale/retailOrganizations3.1%2.6%2.5%2.3%2.2%2%Transportation/storageArts/entertainment12Description:Duringthefirsthalfof2023,thenumberofcyberattackstomultipletargetsmadeupapproximately20percentofthetotalincidentsinthecountry.Thehealthcaresectorwastargetedby14.5percentofcyberattacks.Cyberattackstothegovernment,themilitary,andlawenforcementagenciesmadeupalmost12percentofthetotal,whileattackstotheICTsectorcomingtorepresent11.4percentofthetotalfortheyear.ReadmoreNote(s):Italy;H12023Source(s):AssociazioneItalianaperlaSicurezzaInformaticaShareofcyberattacksoncompaniesandinstitutionsinItalyin1sthalfof2023,bycategoryShareofcyberattacksonItaliancompanies2023,bycategoryShareofattacks15%0%5%10%20%25%30%35%MalwareDDoS31.1%30%Unknown18%Phishing/SocialengineeringVulnerabilities13.6%3.8%Webattack1.5%0.8%0.8%IdentitytheftMultipletechniques13Description:Duringthefirsthalfof2023,malwareswerethemostcommontypeofcyberattacksrecordedinItaly,withashareofover31percentreportedamongprivatecompaniesandpublicinstitutions.DDoSattacksrankedsecond,witharound30percentofthesurveyedcompaniesreportingtohavebeenattackedbydistributeddenial-of-service.Identitytheftattacksrepresentedlessthanonein10oftherecordedattacksduringthelastexaminedperiod.

ReadmoreNote(s):Italy;H12023Source(s):AssociazioneItalianaperlaSicurezzaInformaticaDistributionofcyberattacksinItalyin2ndquarter2023,byaffectedsectorItaly:shareofcyberattacksQ22023,byaffectedsector60%54%50%40%30%20%11%9%8%10%6%6%3%3%0%ServicesManufacturing

Healthcareservices

TechnologiesLegalTransportConstructionFinancialorganizations14Description:TheserviceindustrywasthesectorinItalymosttargetedbycybercrimeduringthesecondquarterof2023.Thesectorwastargetedbyoverhalfofthecyberattacksrecordedduringthelastexaminedperiod.CompaniesinthemanufacturingsectorwerethesecondmosttargetedgroupamongItalianindustries,with11percentoftherecordedcyberattacks.ReadmoreNote(s):Italy;Q22023Source(s):AgenziaNazionaleStampaAssociata;Website(Swascan(Tinexta))Shareofsmallandmediumenterprises(SME)inItalythatexperiencedcyberattacksasofNovember2023Italy:smallandmediumcompaniesencounteringcyberattacks2023100%90%80%70%60%50%40%30%20%87%13%10%0%ExperiencedcyberattacksDidnotexperiencecyberattacks15Description:AsofNovember2023,only13percentoftheItaliansmallandmediumenterprises(SME)reportedtheyexperiencedcyberattacksinthepreviousfouryears.Incomparison,87percentofthesurveyedsmallandmedium-sizedcompaniesreportedtheyhadnotencounteredcyberattacksasoftheendof2023.ReadmoreNote(s):Italy;November2023;attacksexperiencedinthepreviousfouryearsSource(s):Generali;OsservatoriDigitalInnovation;ShareofcompaniesinItalyhavingencounteredcyberincidentsasofJanuary2023,bysizeShareofItaliancompaniesexperiencingcyberattacks2023,bysizeShareofrespondents15%

20%0%5%10%25%24%30%35%40%45%50%55%Small-lessthan200employeesMedium-between1,000and5,000employeesLarge-over5,000employees39%48%16Description:AccordingtoasurveyofsecurityprofessionalsatcompaniesinItalyconductedinJanuary2023,approximatelythehalfofrespondentsinlargecompanieswithover5,000employeesreportedhavingexperiencedaransomwareattack.Incomparison,onlyaroundone-quarterofsmallcompaniesreportedthesame.Additionally,40percentofmediumcompaniesreportedhavingexperiencedaransomwareattackasofthelastexaminedperiod.

ReadmoreNote(s):Italy;January2023;200respondents;majorityofrespondentsweresecurityprofessionalsofcompaniesSource(s):TheInnovationGroup;Website(cyberangels.it)MostcommonvectorsofcyberrisksforcompaniesinItalyasofJanuary2023CyberriskvectorsinItaliancompanies2023Shareofrespondents10%

20%0%30%40%50%60%58%70%80%90%Employeesunaware/alittleawareofrisks82%VulnerabilitieslinkedtooutdatedapplicationsSecurityrisksassociatedwiththirdpartiesVulnerabilitieslinkedtounsupportedoperatingsystemsUnauthorizedaccess41%38%14%13%12%12%11%VulnerabilitieslinkedtotheuseofcloudservicesOutdatedsecuritycontrolsNegligentuseofsocialmediaVulnerabilitieslinkedtomobiledevices(smartphones,tablets)VulnerabilitieslinkedtoIoT(connecteddevices)7%17Description:AsofJanuary2023,82percentofITmanagersofcompaniesinItalyreportedthatemployeeunawarenesswastheprimarysourceofcyberattacks.Thesecondmajorriskreportedby58percentofITmanagerswasvulnerabilitieslinkedtooutdatedapplications.Additionally,thethirdsignificantsourceofcyberthreats,with41percentofrespondentsreportingit,wassecurityrisksassociatedwiththirdparties.ReadmoreNote(s):Italy;January2023;200respondents;majorityofrespondetnsweresecurityprofessionalsofcomoaniesSource(s):TheInnovationGroup;Website(cyberangels.it)NumberofmonthlycyberincidentsthathadanationalimpactinItalyandwerehandledbytheComputerSecurityIncidentResponseTeam(CSIRT)fortheItalianNationalCybersecurityAgencyin2022MonthlycybersecurityeventswithnationalimpacttreatedbytheItalianCSIRT202214011812010080604020010910810710487868585796363Jan'22Feb'22Mar'22Apr'22May'22Jun'22Jul'22Aug'22Sep'22Oct'22Nov'22Dec'2218Description:In2022,therewereatotalof1,094cybereventsthatweretreatedbytheItaliantechnicalandoperationalofficesoftheAgenziaperlaCybersicurezzaNazionale(AgencyfortheNationalCybersecurity).InMay2022,thecountry'sComputerSecurityIncidentResponseTeam(CSIRT)workedon109cyberincidentsthatwerereportedtothemandthathadanationalimpact.InJanuary2022,theagencyworkedonatotalof63casesthatwerereportedbycompaniesandItalianinstitutionsin[...]

ReadmoreNote(s):Italy;JanuarytoDecember,2022;incidentsreportedtotheCSIRTthathadnationalimpact;widerindustrymetricsmayvarySource(s):AgenziaperlacybersicurezzanazionaleNumberofcybercrimeeventsinItalytargetingnationalpublicinstitutionsin2022,bytypeCybersecurityeventsagainstItaliannationalpublicinstitutions2022,bytypeNumberofevents1005152025RansomwareDDoS2114MalwarecompromiseSpearphishing922222IntrusionattemptsvialogincredentialsPhishingDataexposureAPTMailboxcompromiseExploitationofvulnerabilitiesDefacement11119Description:In2022,21cyberattackstargetingtheItaliannationalpublicinstitutionsthatweretreatedbythecountry'stechnicalandoperationalofficesoftheAgenziaperlaCybersicurezzaNazionale(ItalianNationalCybersecurityAgency)wereransomware.Ofthe160cyberincidentsreportedtotheagency'sCSIRT(ComputerSecurityIncidentResponseTeam),14wereDDoSattacks.ReadmoreNote(s):Italy;JanuarytoDecember,2022;57respondents;cybereventsagainstnationalpublicistitutionsthatwereconfirmedtohaveanimpactandwerereportedtotheCSIRT(ComputerSecurityIncidentResponseTeam),widerindustrymetricsmayvarySource(s):AgenziaperlacybersicurezzanazionaleCHAPTER

03RansomwareencountersMostusedcybersecuritymethodsandtoolsappliedbyItaliancompaniestodetectmalwareandransomwareattacksasofJanuary2023MethodstodetectmalwareandransomwareattacksinItaliancompanies2023Shareofrespondents0%10%20%30%40%50%60%70%80%90%100%110%Anti-malware/Antivirus/ToolsofsecurityendpointsE-mail/Webgateways96%71%Intrusiondetectionsystem60%Endpointdetectionandresponse(EDR)Externalsocservices51%49%Extendeddetectionandresponse(XDR)MonitoringofnetworkbehaviorCyberthreatintelligence45%40%40%37%UserbehaviormonitoringFilemonitoring24%21%PresenseofasecurityanalystManageddetectionandresponse(MDR)ThirdpartysecuritymanagementWeareunabletodetectransomwareattacks16%15%1%21Description:AccordingtoasurveyofmanagersandITprofessionalsofItaliancompaniesconductedinJanuary2023,themostcommontoolsusedtoidentifyransomwareattackswereanti-malware,antivirus,andendpointsecuritytools,with96percentofrespondentsreportingusingthem.E-mailandwebgatewayswerethesecondmostpopulartoolstorevealthepresenceofransomware,withsevenin10respondentsreportingusingthistypeoftools.

ReadmoreNote(s):Italy;January2023;200respondents;managementandITprofessionalsSource(s):TheInnovationGroup;Website(cyberangels.it)ShareofcompaniesinItalyhavingencounteredransomwareattacksinthepastfromFebruary2022toJanuary2023CompaniesinItalyencounteringaransomwareattackinthepast2022-20232022202380%70%60%50%40%30%20%10%0%67%54%40%27%6%6%YesNoIdon'tknow22Description:AccordingtoasurveyofmanagementandITprofessionalsinItaliancompaniesconductedinJanuary2023,aboutfourintenrespondentsreportedtheircompanyhavingbeenattackedbythistypeofmalware.Meanwhile,aroundhalfofthecompanieshadneversufferedaransomwareattack.Thesefigureshavechangedsignificantlysince2022,whentheshareofcompaniesthatencounteredransomwareattackswas27percent.

ReadmoreNote(s):Italy;February2022toJanuary2023;200respondents;managementandITprofessionalsSource(s):TheInnovationGroup;Website(cybersecurityangels.it)ShareofcompaniesinItalyexperiencingransomwareattacksasofJanuary2023,bytypeCompaniesinItalyencounteringransomware2023,bytypeShareofrespondents40%0%Malwareinfection20%60%80%100%100%120%Dataintegrityattack56%52%Lateralmovements/privilegeescalationsDestructiveattackaimedatdamagingsystemsDatabreach/sensitivedatatheftAdvancedpersistentthreat/multi-stageattackMaliciouslyencryptedtraffic34%19%16%16%DDoSattackasadiversion10%Maliciousactivityonlegitimatedatatraffic2%23Description:AsofJanuary2023,everyransomwareattackencounteredbyItaliancompaniesincludedamalwareinfection.Furthermore,56percentofransomwareattacksincludeddataencryption.Networklateralmovementswerethecaseforabouthalfoftheincidents.ReadmoreNote(s):Italy;January2023;200respondents;companiesthatencounteredaransomwareattackinthepastSource(s):TheInnovationGroup;Website(cybersecurityangels.it)ShareofransomwareeventsinItalyhandledbytheComputerSecurityIncidentResponseTeam(CSIRT)fortheItalianNationalCybersecurityAgencyin2022,byvictimtypeShareofransomwaretreatedbytheItalianCSIRT2022,byvictimtypePublic18%Private82%24Description:In2022,over80percentofalltheransomwarethatwastreatedbytheItaliantechnicalandoperationalofficesoftheAgenziaperlaCybersicurezzaNazionale(ItalianNationalCybersecurityAgency)targetedtheprivatesector.Incomparison,18percentoftheransomwarereportedtotheItalianofficialcybersecurityagencytargetedthepublicsector.ReadmoreNote(s):Italy;JanuarytoDecember,2022;130respondents;ransomwareeventsreportedtotheCSIRT(ComputerSecurityIncidentResponseTeam),widerindustrymetricsmayvarySource(s):AgenziaperlacybersicurezzanazionaleShareofransomwareeventstargetingtheItalianprivatesectorin2022,bycompanysizeRansomwaretargetingtheItalianprivatesector2022,bycompanysize45%40%41%35%31%30%25%20%15%10%5%28%0%LargeenterprisesMedium-sizeenterprisesSmallenterprises25Description:In2022,over40percentofalltheransomwaretargetingtheItalianprivatesectorthatwastreatedbythecountry'stechnicalandoperationalofficesoftheAgenziaperlaCybersicurezzaNazionale(ItalianNationalCybersecurityAgency)affectedsmallenterprises.Accordingtothesource,thefiguremightbehigherassmallandmediumcompaniesdonotreporttheeventstotheauthoritiesanddecidetohandlethecaseontheirown.Incomparison,around31percentoftheransomwareevents[...]

ReadmoreNote(s):Italy;JanuarytoDecember,2022;130respondents;nationallyrelevantransomwareeventsreportedtotheCSIRT(ComputerSecurityIncidentResponseTeam),widerindustrymetricsmayvarySource(s):AgenziaperlacybersicurezzanazionaleHackergroupsbehindransomwareeventstargetingtheprivatesectorinItalyin2022ThreatactorsbehindransomwareintheItalianprivatesector2022Shareofevents20%0%5%10%15%25%30%35%40%45%LockbitConti42%12%AlphaVMUnclaimedViceSocietyHive8%7%4%4%BlackByteBlackBastaRoyal3%3%2%2%2%2%2%RagnalLockerQuantumLVblogEverest26Description:In2022,42percentoftheransomwareattackslaunchedagainsttheItalianprivatesectorwereattributedtotheLockbitgroup.Approximately12percentoftheransomwareattacksonItaliancompaniesthatweretreatedbythecountry'stechnicalandoperationalofficesoftheAgenziaperlaCybersicurezzaNazionale(ItalianNationalCybersecurityAgency)wereattributedtotheContihackergroup,whilesevenpercentoftheattackswentunclaimed.ReadmoreNote(s):Italy;JanuarytoDecember,2022;130respondents;nationallyrelevantransomwareeventsreportedtotheCSIRT(ComputerSecurityIncidentResponseTeam),widerindustrymetricsmayvarySource(s):AgenziaperlacybersicurezzanazionaleCHAPTER

04OthermalwareLeadingtypesoftrojanmalwaretargetingusersandcompaniesinItalyasofJune2022MostcommontrojanmalwarecampaignsinItaly2022Shareofmalware6%0%2%4%8%10%12%14%16%Trojan-Ransom.JS.Alien.gen15.23%Trojan-Ransom.Win32.Blocker.pefTrojan-Ransom.Win32.Crypmodng.genTrojan-ransom.win32.Crypren.genTrojan-Ransom.Win32.Crypmod.gen7.78%7.31%7.11%5.76%28Description:AccordingtoastudyconductedbetweenJune2021andJune2022,Trojan-Ransom.JS.AlienwerethemostcommontypeofmalwaretargetingnetworkinItaly.Malwarecampaignsunderthisnamerepresented15.23percentofthetotalmalwarestargetingItalyintheexaminedperiod.Trojan-Ransom.Win32.Blockerattacksmadeupalmost7.8percentofthetotalmalwarecampaignsrecorded,whileTrojan-Ransom.Win32.Crypmodngmadeup7.31percentofthetotalmalwareattacks[...]

ReadmoreNote(s):Italy;June2021toJune2022Source(s):SOCRadarLeadingtypesofexploitstargetingusersandcompaniesinItalyasofJune2022MostcommonexploitkitsinItaly2022Shareofmalware15%0%5%10%20%25%30%35%40%Exploit.MSOffice.CVE-2018-0802.genExploit.MSOffice.CVE-2017-11882.genExploit.Win32.CVE-2011-3402.aExploit.OLE2.Wahel.a37.38%29.37%14.49%2.71%Exploit.MSOffice.CVE-2017-0199.h2.41%29Description:AccordingtoastudyconductedbetweenJune2021andJune2022,Exploit.MSOffice.CVE-2018-0802werethemostcommontypeofexploitkitstargetingtheinternetnetworksinItaly.Exploitunderthisnamerepresented37.4percentofthetotalkitstargetingItalyintheexaminedperiod.Exploit.MSOffice.CVE-2017-11882attacksmadeupalmost29.4percentofthetotalmalwarecampaignsrecorded,whileExploit.Win32.CVE-2011-3402.amadeup14.5percentofthetotalattacksintheexploits[...]

ReadmoreNote(s):Italy;June2021toJune2022Source(s):SOCRadarCyberattackstocloudICTsystemsinItalyasofFebruary2022,bytypeCyberattackstocloudICTsystemsinItaly2022,bytypeShareofcompanies0%10%20%15%30%40%50%60%70%AttackstargetingcloudinfrastructureTraversal/LateralattackswithinthecloudvirtualizationenvironmentCompromissionofprivilegedaccounts15%15%ExploitationofknownapplicationvulnerabilitiesDenialofService/DooS12%8%8%ExfiltrationofsensitivedatadirectlyfromcloudappSupplychaincompromission4%4%4%LostorstolendevicewithcontentsynchronizedordownloadedfromcloudAccountorcredentialhijackingNoneoftheabove58%30Description:Duringa2022surveyconductedinItaly,15percentofcompaniesstatedthattheyexperiencedcyberattackstargetingcloudinfrastructure.Thesameshareofcompaniessaidthattheyexperiencedtraversalandlateralattackswithinthecloudvirtualizationenvironmentandattackscompromisingprivilegedaccounts.ReadmoreNote(s):Italy;February2022;53respondents;ItaliancompaniesSource(s):TheInnovationGroupMostrelevantrequirementsofcloudsecurityinItalyasofFebruary2022MostrelevantrequirementsofcloudsecurityinItaly2022Shareofcompanies0%10%20%30%40%50%60%57%54%UnifiedsecuritymanagementofdifferentdatacenterandcloudenvironmentsSecurityoffering/SLAofpubliccloudserviceproviderSecuritysolutionstodetect/preventadvancedthreats49%46%AbilitytointegrateasecuritysolutionwithoutconflictingwiththecurrentsecuritySecuritysolutionsthatcanadaptandscalebasedonevolvingneedsofthe…Solutionreliability/abilitytofunctionwithoutimpactingdataavailabilityROI/totalcostofownership40%40%37%SpecificsecuritysolutionsforprotectingvirtualenvironmentsEasy-to-implementsolutionsdeliveredwithminimaltrainingandsupportfromt…Consolidatesecuritytechnologiesintofewerplatforms29%23%17%SolutionswithminimalimpactondatacenterperformanceImplementsecuritysolutionscompatiblewiththeSDDCarchitecture14%14%31Description:Duringa2022surveyconductedinItaly,57percentofcompaniesstatedthatthemostrelevantcloudsecurityrequirementwastheunifiedsecuritymanagementofdifferentdatacenterandcloudenvironments.Bycontrast,accordingtoanother23percentofcompanies,themostimportantrequirementwastofindeasy-to-implementsolutionsdeliveredwithminimaltrainingandsupportfromthevendor.ReadmoreNote(s):Italy;February2022;53respondents;ItaliancompaniesSource(s):TheInnovationGroupCHAPTER

05DatabreachesHighestfinesissuedforGeneralDataProtectionRegulation(GDPR)violationsinItalyasofJune2023(inmillioneuros)ItalyhighestfinesissuedforviolationsofGDPR2023Amountoffineinmillioneuros051015202530TIM,Jan2020ClearviewAlInc.,Feb2022WindTreS.p.A.,Jul202027.82016.7VodafoneItaliaS.p.A.,Nov2020EniGaseLuce,Dec2019(1)TIMS.p.A.,Apr302312.258.57.63EdisonEnergiaS.p.A.,Dec2022FastwebS.p.A.,Mar2021SkyItaliaS.r.l.,Sep20214.94.53.3EniGaseLuce,Dec2019(2)333Description:Atelecommunicationcompany,TelecomItalia(TIM),wasfined27.8millioneurosbyItaly'sdataprivacyregulator.ThisisthehighestfineissuedinthecountrysincetheimplementationoftheGeneralDataProtectionRegulation(GDPR)inMay2018.TheFebruary2022fineof20millioneurosimposedagainstthecompanycalledClearviewAIwasthesecond-mostsignificantfineinthecompany.ReadmoreNote(s):Italy;May2018toJune2023Source(s):CMS;GDPREnforcementTrackerAveragecostofadatabreachinItalyfrom2019to2023(inmillionU.S.dollars)AveragecostperdatabreachinItaly2019-20234.54.03.863.743.613.523.53.193.02.52.01.51.00.50.02019202020212022202334Description:In2023,theaveragecostofadatabreachinItalywas3.86millionU.S.dollars,upfrom3.74millionU.S.dollarsinthepreviousyear.Theglobalaveragecostperdatabreachwas