Organisations at Risk: 87% of Fortune 500 finance and insurance companies scored a D or lower for their cybersecurity efforts
The relentless evolution of cyberattacks and the growing complexity of digital infrastructures due to cloud adoption, remote work, and intricate supply chains have made effective cybersecurity risk assessment an urgent priority. Yet, despite the escalating threats, most organizations appear to lag in adopting robust security measures.
According to the Cybernews Business Digital Index, 84% of analyzed Fortune 500 companies received a D or worse for their cybersecurity efforts, highlighting widespread vulnerabilities among some of the world’s largest enterprises.
Finance and Insurance: The Most Vulnerable Sector
As custodians of sensitive financial and customer data, companies in the Finance and Insurance sector face high stakes when it comes to cybersecurity. Yet, the report reveals alarming shortcomings. Of the 102 Fortune 500 companies in this category, 63% earned a D rating, and nearly 24% received an F. This sector’s average security score was a concerning 71, with only 1% achieving an A-level rating.
The stakes for the Finance and Insurance sector are especially high given recent events, such as the breach of the U.S. Treasury Department by Chinese hackers, underscoring cybercriminals’ significant interest in this industry.
Other Industries Face Similar Challenges
The challenges are not confined to Finance and Insurance. Several other key industries showed significant cybersecurity deficiencies:
- Manufacturing: With an average security score of 65, 81% of companies in this category scored D or worse, and 53% received an F rating. Only 3% achieved an A rating.
- Energy and Natural Resources: This sector recorded a staggering 61% of companies scoring an F, while 24% managed a D. Only 7% achieved an A rating.
- Technology and IT: 75% of companies analyzed in this sector received a D or worse, indicating widespread vulnerabilities.
- Healthcare: A critical sector for sensitive data, 55% of companies in Healthcare and Pharmaceuticals earned a D, and 31% an F. Just 10% achieved an A grade, with the average score at 70.
- Retail and Wholesale: Half of the companies analyzed received a D, while 40% scored an F.
- Construction and Engineering: While slightly better than some categories, 73% of companies in this group still received D and F ratings.
- Transportation and Logistics: This sector saw 33% of companies score poorly with D and F ratings.
- Consulting and Business Services: Here, 43% earned a D, and 57% received an F rating.
- Real Estate and Development: Alarmingly, 30% scored a D, and 60% fell into the F category.
Key Vulnerabilities Identified
The Cybernews Business Digital Index highlights several critical issues undermining cybersecurity across industries:
- SSL Configurations: Researchers found over 490 issues related to Secure Sockets Layer (SSL) across 466 analyzed companies.
- Critical Vulnerabilities: Nearly 671 critical or high-risk vulnerabilities were identified, which could allow hackers to infiltrate networks and steal sensitive data.
- Email Security: The analysis uncovered 254 email security issues.
- Data Breaches: There were 480 documented data breach incidents across the analyzed companies.
Research Methodology
The Cybernews team evaluated 466 companies from the Fortune 500 list, excluding 34 firms due to incomplete data. The analysis focused on seven key areas:
- Software patching
- Web application security
- Email security
- System reputation
- SSL configuration
- System hosting
- Data breach history
Data was collected using various sources, including IoT search engines, IP and domain reputation databases, and custom scanning tools. For more details, the methodology can be reviewed here.
This report paints a stark picture of the cybersecurity landscape across major industries, emphasizing the urgent need for improved security measures to protect sensitive data and systems from ever-evolving threats.
