Expectations About Cyberattacks (Aug 2002)

August, 2002

Computer Economics developed and conducted a survey on IT security perceptions, awareness, and practices during May and June of 2002. Because of the news coverage about cyberattacks and the various alerts by the FBI, we decided to ask survey respondents about their views on cyberattacks. It appears that most people have received the message about the cyberthreat.

Considerably more people think that large-scale cyberattacks will be launched by terrorists in less than two years (69.6%) than think that large-scale cyberattacks will be launched by a military in less than two years (48.4%). Figure 1 shows the responses for the questions about when large-scale cyberattacks will occur.

FIGURE 1
When Large-Scale Cyberattacks Will Occur

Response

When Large-Scale
Cyberattacks Will Be
Launched by a Military

When Large-Scale
Cyberattacks Will Be
Launched by Terrorists

Less than 2 years

   48.4%

  69.6%

2 to 5 years

28.2

20.9

5 to 10 years

11.7

  4.2

More than 10 years

  5.9

  1.6

Cyberattacks will never happen

  5.9

  3.7

 
Even though the majority of responders think that cyberattacks are imminent and will come in less than two years, far fewer think that their country (9.4%) or their organization (36.1%) are prepared to defend against cyberattacks. Figure 2 shows what respondents think about the preparation to defend against cyberattacks.

FIGURE 2
Preparation to Defend Against Cyberattacks

Response

Country Is Prepared to
Defend Against Large-Scale Cyberattacks

Organization Is Prepared to
Defend Against Large-Scale Cyberattacks

Yes

     9.4%

  36.1%

No

80.1

57.1

Don’t Know

10.5

  6.8

August 2002