For the first time ever, Cyber incidents (39% of responses) ranks as the most important business risk globally in the ninth Allianz Risk Barometer 2020, relegating perennial top peril Business interruption (BI) (37% of responses) to second place. Awareness of cyber threats has grown rapidly in recent years, driven by companies increasing reliance on data and IT systems and a number of high-profile incidents. Seven years ago, cyber ranked 15th with just 6% of responses.
Changes in legislation and regulation (#3 with 27%) and Climate change (#7 with 17%) are the biggest climbers globally underlining the U.S.-China trade war, Brexit and global warming as increasing concerns for companies and nations. The annual survey on global business risks from Allianz Global Corporate & Specialty(AGCS) incorporates the views of a record 2,718 experts in over 100 countries, including CEOs, risk managers, brokers and insurance experts.
In the United States, cyber took the top spot (43%) followed by BI (37%) and natural catastrophes (32%). Market developments (24%) and changes in legislation and regulation (23%) round out the top five U.S. business risks. For a list of top U.S. risks, click here.
"The Allianz Risk Barometer 2020 highlights that cyber risk and climate change are two significant challenges that companies need to watch closely in the new decade," says Joachim Müller, CEO of AGCS. "Of course, there are many other damage and disruption scenarios to contend with, but if corporate boards and risk managers fail to address cyber and climate change risks, this will likely have a critical impact on their companies' operational performance, financial results and reputation with key stakeholders. Preparing and planning for cyber and climate change risks is both a matter of competitive advantage and business resilience in the era of digitalization and global warming."
Cyber risks continue to evolve
In addition to being the top risk globally, Cyber incidents is among the top three risks in many of the countries surveyed; in Austria, Belgium, France, India, South Africa, South Korea, Spain, Sweden, Switzerland, the UK and the U.S. Businesses face the challenge of larger and more expensive data breaches, an increase in ransomware and spoofing incidents, as well as the prospect of privacy-driven fines or tigation after any event. A mega data breach - involving more than one million compromised records - now costs on average $42mn, up 8% year-on-year.
"Incidents are becoming more damaging, increasingly targeting large companies with sophisticated attacks and hefty extortion demands. Five years ago, a typical ransomware demand would have been in the tens of thousands of dollars. Now they can be in the millions," says Marek Stanislawski, Deputy Global Head of Cyber, AGCS.
Extortion demands are just one part of the picture: Companies can suffer major BI losses due to the unavailability of critical data, systems or technology, either through a technical glitch or cyber-attack. "Many incidents are the results of human error and can be mitigated by staff awareness trainings which are not yet a routine practice across companies," says Stanislawski.
Business interruption – an undiminished threat with new causes
After seven years at the top, BI drops to the second position in the Allianz Risk Barometer. However, the trend for larger and more complex BI losses continues unabated. Causes are becoming ever more diverse, ranging from fire, explosion or natural catastrophes to digital supply chains or even political violence.
Businesses are also increasingly exposed to the direct or indirect impact of riots, civil unrest or terrorism attacks. The past year has seen civil unrest escalate in Hong Kong, Chile, Bolivia, Colombia and France, resulting in property damage, BI and general loss of income for both local and multinational companies as shops closed for months, customers and tourists stayed away or employees couldn't access their workplace due to safety concerns.
Changes in legislation and regulation ranks third in the Allianz Risk Barometer, up from fourth in 2019. Tariffs, sanctions, Brexit and protectionism were cited as key concerns. Around 1,300 new trade barriers were implemented in 2019 alone. The U.S.-China trade dispute has brought the U.S. average tariff close to levels last seen in the 1970s. "Trade policy is becoming just another political tool for many different policy ends, such as economic diplomacy, geopolitical influence or environmental policy," explains Ludovic Subran, Chief Economist of Allianz. "This activism is not restricted to the U.S.: it has spread to Japan and South Korea, India and the EU."
Climate change brings added risk complexity
Climate change rises to its highest-ever position of seventh in the Allianz Risk Barometer. An increase in physical losses is the exposure businesses fear most (49% of responses) as rising seas, drier droughts, fiercer storms and massive flooding pose threats to factories and other corporate assets, as well as transport and energy links that tie supply chains together. Companies may have to prepare for more litigation in future – climate change cases targeting 'carbon majors' have already been brought in 30 countries around the world, with most cases filed in the U.S.