Latest KPMG report reveals mismatch between consumer expectations and security executive priorities.
The continuous evolution of digital transformation is outstripping the pace of cybersecurity in organizations. As a result, we’re witnessing a fundamental disconnect between consumer expectations and concerns, and the ability of organizations to meet those expectations, according to KPMG’s Consumer Loss Barometer report.
The global survey of more than 2,000 consumers and 1,800 Chief Information Security Officers (CISOs) was conducted to assess whether there has been a shift in consumer expectations regarding digital trust, and whether organizations are placing the consumer’s security front and centre of their digital product offerings.
KPMG’s study found that consumers continue to have reservations about the possible misuse of their private details, with 69% of consumers globally reported concerns about their technology being compromised. In particular, respondents from Malaysia are most concerned about apps (95%), Wi-Fi (82%) and cloud (77%) being compromised. It was further discovered that 49% of consumers from Malaysia said they have had their financial information compromised, higher than the global average of 37%.
On the matter of trust in social media and cloud platforms, 48% of consumers in Malaysia indicated they limit the amount of personal data stored online due to security and privacy concerns. Moreover, 45% indicated that they would like companies and organizations they interact with to disclose measures taken to protect their privacy and security.
On the other hand, two-thirds of CISOs say they prioritize financial loss and reputational risk over the impact on customer trust. According to the Executive Director of KPMG’s Emerging Tech Risk and Cyber unit in Malaysia, Ubaid Mustafa Qadiri, the mismatch between consumer expectations and security executive priorities is a grave concern.
“It’s clear that organizations are still prioritizing their bottom line ahead of consumer expectations and concerns, despite the opportunity to use effective cybersecurity strategy to build consumer confidence and engagement. Companies should not wait until an incident occurs to act; in times of crises, consumer trust will be lost,” Ubaid cautioned.
In the event of a breach, consumers prefer compensation (42%) and proof of a fix (35%) over an apology (24%). Conversely, CISOs say they would prioritize an apology over provision of those details (47% and 8% respectively).
Ubaid commented, “As technology innovation progresses, consumers are revising upward their expectations on how organizations deliver digital products and services, and expect security as integral to their digital experience. The gap in expectations between consumers and enterprises offers a tremendous opportunity for forward-thinking organizations to redesign their relationship with their customers, putting trust at the centre of how they do business. For organizations that have prioritized on building their cyber resilience capabilities, now is the time to extend this message to their customers.”
To read KPMG’s report and view statistics out of Malaysia, visit www.kpmg.com.my/ConsumerLossBarometer
The data published in this report are based on a survey of 1,802 CISOs (or equivalent) in 24 markets, across 12 industries. The respondents were from companies with annual revenues between US$100 million to US$10 billion or more. Consumer data was based on a survey of 2,151 consumers in 24 markets including Malaysia. The sample included all age categories, with a higher percentage of Millennials and Gen Xers, as well as being diversified by gender.
© 2020 KPMG PLT, a limited liability partnership established under Malaysian law and a member firm of the KPMG network of independent member firms affiliated with KPMG International Cooperative ("KPMG International"), a Swiss entity. All rights reserved.