Cyber security was already in focus, but COVID-19 has front-loaded years of future spending into the near term, fostering new business processes.
This report is part of the “New normal, new opportunities” series, in which we examine secular trends in a post-COVID-19 world. The series will cover a range of themes that are emerging as a result of social distancing, the work-from-home imperative, health care developments, corporate implications, and broader societal change. We believe identifying these trends and understanding their investment implications will be critical to navigating the road ahead. Additional reports will be released over the coming weeks.
Cyber security spending has been a growing area of information technology spend for years, with breaches increasing in frequency, data size, and financial and reputational consequences. No industry is spared and no company isolated from cyber attack attempts, which can often result in successful attacks. The ramifications are wide and often all-encompassing, with loss of information, business disruption as well as likely customer distrust. These attacks and incidents can come from both outside hackers and corporate insiders.
Cyber security exists to combat cyber attacks, with the most common being: illegally obtaining corporate information via compromising business emails; identity theft; ransomware (malicious software that prevents access to files, systems, or networks, and typically demands a ransom for release); and phishing or spoofing, which tries to trick individuals into providing sensitive information.
Gartner currently sizes the information security and risk management market at $124 billion in 2020, which RBC Capital Markets believes could reach $176 billion in 2025, representing a compound annual growth rate of 7.3 percent. The majority of cyber security spending is for legacy security needs, but this approach could drastically change due to the work-from-home environment caused by COVID-19—a transformation that is likely here to stay.
The negative statistics were already accelerating at a frightening pace prior to COVID-19, with Accenture stating that security breaches have increased by 11 percent since 2018 and 67 percent since 2014. According to the University of Maryland, hackers attack computers with internet access every 39 seconds, on average 2,244 times a day. Even with an increasing amount of dollars being devoted to identifying these breaches and correcting them, an IBM study found the average time it took companies to recognize a breach in 2019 was 206 days, and the average cost to a company was $3.9 million.
Cyber security has evolved over the years from fighting the first computer worm in 1988 to countering credit card breaches to protecting networks to safeguarding the cloud. An increase in devices per user and the billions of connected devices within the Internet of Things have made points of access explode. A suddenly remote and distributed workforce has amplified the need for different cyber security solutions.
It’s highly likely that the changes thrust upon corporations in light of COVID-19 will only escalate the need for continued spending on cyber security, and RBC Capital Markets believes COVID-19 has accelerated changes to security spend by five years. Key areas likely to be focused on are: cloud security; application access and security; identity; protecting workloads (an expansion of the idea of endpoint security or anti-virus); and monitoring and observability. New emerging trends include: Secure Access Service Edge (SASE), which supports the digital transformation of enterprises and the dissolution of the traditional network perimeter to enable security at the point of access, and Zero-Trust Network Access (ZTNA), which provides identity-aware access to eliminate the excessive “implicit trust” inherent in wide network access that malicious actors can exploit.
RBC Capital Markets refers to the paradigm shift toward location-agnostic work that has been triggered by COVID-19 as “Work 2.0.” Although time will tell how many workers shift from the office to working from home, an RBC Capital Markets’ survey suggested nearly 60 percent of employees had never worked from home prior to COVID-19, with an additional 15 percent working from home just a few days per month. Although it’s hard to know how many employees will eventually return to the office full-time, it’s highly likely that the majority of employees will want some increased flexibility going forward.
This could be a win-win situation, as corporations are interested in both the real estate savings and a reduced carbon footprint with fewer employees commuting. But increased corporate network access at home impacts the structure of cyber security spend. According to RBC Capital Markets, traditional infrastructure was designed to accommodate 15 percent to 20 percent of employees working remotely, which will likely be much higher going forward.
With enhanced security software in place, old processes can safely evolve. Just as the world has embraced the transition from coins, cash, and checks to credit cards, mobile payments, and contactless payments, the corporate world is in the early stages of moving from legacy paper to digital contracts. Real estate has been an early adopter of the technology, but large swaths of the economy still haven’t had the same uptake, including most areas of the government.
RBC Capital Markets surveyed 1,000 “knowledge workers” (i.e., those who “think” for a living such as engineers, scientists, accountants, lawyers, and academics) regarding their usage and thoughts toward information technologies. The survey showed the growing importance of many new communications tools spurred by COVID-19, with e-signature solutions cited as the No. 4 rising new technology. An electronic signature, or e-signature, is a legal way to consent to electronic documents or forms and replaces a handwritten signature. Thirty-two percent of respondents said they are using e-signature tools more now that they are working from home due to COVID-19 than before. RBC Capital Markets believes the opportunity for this emerging trend was $51 billion pre-COVID-19, but expanded to $86 billion as workers and individuals are likely to find ways to engage in business, yet do it with less face-to-face interaction than six months ago.
Source – RBC Capital Markets (Welcome to Work 2.0 – Imagine 2025, 6/11/20)
A crisis can quickly evolve an individual’s and corporation’s perspective, and we are likely in the midst of such a paradigm shift. More employees are working from home, and the benefits that come with that—for both the employee and corporation—are being realized, with spending being reallocated to effect this transformation. Many old processes are being tossed out, in favor of new technology, both out of necessity as well as an understanding that the old way may not have been the best way.
We want to talk about your financial future.
This article was originally published on Aug. 26, 2020.
This publication has been issued by RBC’s Wealth Management international division in the United Kingdom and the Channel Islands which is comprised of an international network of RBC® companies located in these jurisdictions and includes RBC Europe Limited and Royal Bank of Canada (Channel Islands) Limited. You should carefully read any risk warnings or regulatory disclosures in this publication or in any other literature accompanying this publication or transmitted to you by RBC’s Wealth Management international division.
This publication has been compiled from sources believed to be reliable, but no representation or warranty, express or implied is made to its accuracy, completeness or correctness. All opinions and estimates contained in this report are judgements as of the date of this report, are subject to change without notice and are provided in good faith but without legal responsibility. This report is not an offer to sell or a solicitation of an offer to buy any securities. Past performance is not a guide to future performance, the value of investments and income arising can go down, future returns are not guaranteed, and an investor may not get back the amount originally invested. Countries throughout the world have their own laws regulating the types of securities and other investment products and services which may be offered to their residents, as well as the process for doing so. As a result, any securities or services discussed in this report may not be eligible for sale in some jurisdictions. This report is not, and under no circumstances should be construed as, a solicitation to act as a securities broker or dealer in any jurisdiction by any person or company that is not legally permitted to carry on the business of a securities broker or dealer in that jurisdiction. Nothing in this report constitutes legal, accounting or tax advice or individually tailored investment advice.
This material is prepared for general circulation and does not have regard to the particular circumstances or needs of any specific person who may read it. The investments or services contained in this report may not be suitable for you and it is recommended that you consult an independent investment advisor if you are in doubt about the suitability of such investments or services. To the full extent permitted by law none of the entities which comprise the international division of RBC Wealth Management nor any of their affiliates, nor any other person, accepts any liability whatsoever for any direct or consequential loss arising from any use of this report or the information contained herein. No matter contained in this document may be reproduced or copied by any means without the prior consent of RBC Wealth Management.
Clients of RBC Europe Limited may be entitled to compensation from the UK Financial Services Compensation Scheme (FSCS) if it cannot meet its obligations. This depends on the type of business and the circumstances of the claim. Most types of investment business are covered for up to a total of £85,000. For further information about the compensation provided by the FSCS scheme (including the amounts covered and eligibility to claim) please refer to the FSCS website FSCS.org.uk. Please note only compensation related queries should be directed to the FSCS. Royal Bank of Canada (Channel Islands) Limited is not covered by the UK Financial Services Compensation Scheme.
RBC Europe Limited is registered in England and Wales with company number 995939. Its registered office is 100 Bishopsgate, London EC2N 4AA. RBC Europe Limited is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority.
Royal Bank of Canada (Channel Islands) Limited (“the Bank”) is regulated by the Jersey Financial Services Commission in the conduct of deposit taking, fund services and investment business in Jersey. The Bank’s general terms and conditions are updated from time to time and can be found at https://www.rbcwealthmanagement.com/en-eu/terms-and-conditions. Registered office: Gaspé House, 66-72 Esplanade, St. Helier, Jersey JE2 3QT, Channel Islands. Deposits made with Royal Bank of Canada (Channel Islands) Limited in Jersey are not covered by the UK Financial Services Compensation Scheme. Royal Bank of Canada (Channel Islands) Limited is a participant in the Jersey Bank Depositors Compensation Scheme. The Scheme offers protection for ‘eligible deposits’ up to £50,000 per individual claimant, subject to certain limitations. The maximum total amount of compensation is capped at £100,000,000 in any 5 year period. Full details of the Scheme and banking groups covered are available on the Government of Jersey’s website http://www.gov.je/dcs or on request.
Investment services offered by the Bank are not covered by an investor compensation scheme as there is currently no such scheme operating in Jersey, however ‘eligible deposits’ held pursuant to investment services may be protected under the Bank Depositors Compensation Scheme described above – for more information see the Bank’s general terms and conditions. Some of the products that the Bank might recommend to you could be registered overseas and may be covered by a local compensation scheme. Your investment counsellor will provide you with the details of any overseas compensation schemes (where applicable) at the time of making an investment recommendation.
Copies of the latest audited accounts are available upon request from the registered office. ® / ™ Trademark(s) of Royal Bank of Canada. Used under licence.