The price of cyber (in)security: evidence from the Italian private sector
Claudia Biancotti ()
No 407, Questioni di Economia e Finanza (Occasional Papers) from Bank of Italy, Economic Research and International Relations Area
This paper presents evidence on the economic dimension of cyber risk in the Italian private non-financial sector, based on Bank of Italy survey data. In 2016, the median amount spent on preventing cyber attacks was a modest €4,530, i.e. 15 per cent of a typical worker’s annual gross wages. A wide variation exists across sectors and size classes, reflecting differences in how appealing a target a firm is to attackers and firms’ awareness of threats: median values range from €3,120 for small firms to €19,080 in the ICT sector and €44,590 for large firms. The market for cyber defence in our reference universe is worth at least €570 million. Having been attacked in the past proves to be a strong incentive to invest in security. The majority of breached firms suffered damages worth less than €10,000; 0.1 per cent reported costs of at least €200,000. Neither the sampling design nor the questionnaire were geared towards the measurement of tail events: underestimation of large incidents is likely. More information is needed before the economy-wide cost can be estimated.
Keywords: cyber attacks; cybersecurity; cyber risk (search for similar items in EconPapers)
JEL-codes: F50 L60 L80 C83 (search for similar items in EconPapers)
References: Add references at CitEc
Citations: Track citations by RSS feed
Downloads: (external link)
This item may be available elsewhere in EconPapers: Search for items with the same title.
Export reference: BibTeX
RIS (EndNote, ProCite, RefMan)
Persistent link: https://EconPapers.repec.org/RePEc:bdi:opques:qef_407_17
Access Statistics for this paper
More papers in Questioni di Economia e Finanza (Occasional Papers) from Bank of Italy, Economic Research and International Relations Area Contact information at EDIRC.
Bibliographic data for series maintained by ().