Digital trust matters as cybersecurity and privacy expectations increase

Over 80 percent surveyed understand the importance of improving cybersecurity and data protection to securing stakeholder trust
Almost two-thirds of respondents believe information security is seen by their organizations as a risk-reduction activity, rather than a business enabler
More than half surveyed say senior leaders do not understand the competitive benefits of enhanced trust that is enabled by better information security

KPMG’s 2022 Cyber Trust Insights report

As organizations place advanced data and sophisticated analytics at the heart of their operations and reshape customer experiences with innovative digital services, new cybersecurity and privacy challenges are emerging that are requiring corporate leaders to take digital trust seriously.

Building and protecting trust is now integral to how businesses operate and interact with stakeholders. KPMG’s 2022 ‘Cyber Trust Insights’ report has surveyed 1,881 executives to outline five key steps to building trust through cybersecurity and privacy:

Weaving cybersecurity and privacy into the fabric of the organization
Building internal alliances
Evolving the role of the CISO
Securing the support of leadership
Collaborating with other partners in the corporate ecosystem are key to increased trust.

And with that trust comes improved profitability – according to more than a third of respondents – along with better customer retention and stronger commercial relationships. Innovation, talent retention and an increased market share are also possible if organizations recognize that digital trust matters.

Each new data activity that an organization embarks on exposes them to potential vulnerabilities and risks that should be guarded against to maintain trust. Executives are starting to acknowledge these risks - many of the respondents (78 percent) agree that new technologies [such as AI and machine learning] come with unique, and often ill-understood, cybersecurity and trust challenges. If these challenges aren’t adequately addressed, the risk to an organization can be extreme.

Akhilesh Tuteja

Global Cyber Security Practice Leader

KPMG International

Digital transformation is well underway across every industry, with businesses overhauling their technology. Data from KPMG’s Global Tech Report, launched earlier this year, revealed 61 percent of businesses expect to embrace disruptive new tech platforms within two years and, over the next three years, say they will increasingly ramp up their digital investments. KPMG’s research and perspective outlines that for these new emerging technologies to be adopted successfully, businesses must be able to instill trust.

The Cyber Trust Insight report found over 80 percent of executives understand the importance of improving cybersecurity and data protection to securing stakeholder trust. They are also looking to their CISOs to be a champion of digital trust.

CISOs themselves know what is at stake and although many have the confidence of their employers, others do not have a mandate to fulfill their objectives in building stakeholder trust. Almost two-thirds of respondents (65 percent) say that information security is seen by their organizations as a risk-reduction activity, rather than a business enabler. And 57 percent say that senior leaders do not understand the competitive benefits that are possible due to enhanced trust that is enabled by better information security.

CISOs understand their responsibilities but the research shows that many are struggling to fulfill them. This could be because the organization they are in lacks a clear vision of what digital trust really means and the difference it can make.

Businesses of all shapes and sizes are ramping up data collection, expanding the use of new technologies and embracing ESG. This is happening while increasingly stringent regulatory standards are being put in place. CISOs are optimally placed to help their organization navigate these challenging waters but the role of the CISO needs to evolve. CISOs need stronger support from senior leaders. They should be empowered to deliver change, collaborate with the wider ecosystem, and build internal alliances – the CISO is key to building digital trust.

Akhilesh Tuteja

Global Cyber Security Practice Leader KPMG International

Businesses of all shapes and sizes are ramping up data collection, expanding the use of new technologies and embracing ESG. This is happening while increasingly stringent regulatory standards are being put in place. CISOs are optimally placed to help their organization navigate these challenging waters but the role of the CISO needs to evolve. CISOs need stronger support from senior leaders. They should be empowered to deliver change, collaborate with the wider ecosystem, and build internal alliances – the CISO is key to building digital trust.

Akhilesh Tuteja

Global Cyber Security Practice Leader

KPMG International

For media queries, please contact:

Brian O’Neill
Senior Manager, Global External Communications, KPMG International

T: +44 7823 668 689
E: brian.oneill@kpmg.co.uk

About KPMG International

KPMG is a global organization of independent professional services firms providing Audit, Tax and Advisory services. KPMG is the brand under which the member firms of KPMG International Limited (“KPMG International”) operate and provide professional services. “KPMG” is used to refer to individual member firms within the KPMG organization or to one or more member firms collectively.

KPMG firms operate in 144 countries and territories with more than 236,000 partners and employees working in member firms around the world. Each KPMG firm is a legally distinct and separate entity and describes itself as such. Each KPMG member firm is responsible for its own obligations and liabilities.

KPMG International Limited is a private English company limited by guarantee. KPMG International Limited and its related entities do not provide services to clients.

For more detail about our structure, please visit kpmg.com/governance.