Threat | Size

• Difficult to measure

  • Organizations don’t detect or report every incident
  • Hackers sometimes credited for IT problems not related to InfoSec
  • InfoSec firms influencing demand for the their products and services

• 1998 poll of 163 organizations

  • 31% reported $123M in damages
  • 69% couldn’t even quantify their damage

• 1998 FBI study of 428 intrusions in US

  • 21% initiated by disgruntled employees
  • 17% initiated by independent hackers
  • 11% initiated by U.S. competitors
  • 6% initiated by foreign competitors

• 1999 survey of 185 Fortune 500 firms

  • Clean-up costs and lost productivity due to worms and viruses $7.5B for first half of 1999