Una aproximación al coste de la ciberinseguridad

Abstract

The shift towards a digital economy has heightened cybersecurity risks. In Spain, cybercrime has seen a significant rise, accounting for 16.1% of criminal activities in 2022, while global predictions estimate annual cybercrime costs at 10 trillion dollars. In this context, cybersecurity has become essential for the business realm and a determinant of economic growth and national security. However, existing studies to quantify the economic impact of uncovered cyber risks, or simply the cost of cyberinsecurity, prove complex and challenging to compare. This complexity arises from limitations in definition and measurement, as well as the lack of transparency in methodologies or comparability of economic structures across different countries. This article discusses the significance of cybersecurity, reviews the efforts made to measure its economic impact, and outlines the initial steps of the First Study on the Cost of Cyberinsecurity in Spain. This initiative by the ISMS Forum Cybersecurity Observatory complements its Cybersecurity Maturity Level Indicator and aims to determine what percentage of the Spanish GDP is affected by cyberinsecurity, i.e., the economic growth capacity at risk due to underinvestment in information security. The Study on the Cost of Cyberinsecurity in Spain seeks to develop robust metrics to address the complex estimation challenges, using the Delphi method with expert groups to assess cyber risks in specific economic sectors and provide high-quality data.