Here are 4 ways investors can influence more secure and responsible innovation

investors 2019

(Unsplash, 2018)

This article is brought to you thanks to the collaboration of The European Sting with the World Economic Forum.

Author: Algirde Pipikaite, Project Lead, Governance and Policy, World Economic Forum


Modern society is systematically dependent on digital technologies, and has reached a point of no return. The Fourth Industrial Revolution, in enabling our transition to the digital world, has created opportunities. Digitization provides many benefits, but given its rapid pace, we live in cyber insecurity.

Cyber attacks against businesses have almost doubled in the last five years. Since we can’t remove digital technologies from our economies, daily lives or public safety practices, we must take responsibility and apply security much more thoroughly when innovating, in order to prevent major cyber attacks, loss of data, loss of privacy and other negative outcomes.

In the past, the most famous cyber breaches have been related to infringement of privacy and confidentiality. In the near future, the much bigger problem will be potential attacks on integrity and availability, like the infamous Maersk attack that shut down a company’s network and operations for days. If trust in technology is low now, what will happen when hackers are able to tamper with data integrity, and change patients’ health records, including their blood type, allergies, and medical history? What will happen when hackers can attack availability, causing a train signalling system to malfunction, leading to multiple accidents?

In order to rebuild trust, we must put responsibility and security at the forefront of businesses’ innovation development. In the long term, prioritizing these two values is in the interest of investors. Investors who provide the capital to feed innovation must guide start-ups and SMEs to put security first.

These investors should recognize that security is fundamental to any sustainable investment, and that they have a key role to play in ensuring it. In many cases, investors take a very proactive role in helping portfolio companies to succeed. Part of success is providing a long-term vision for the innovation being funded and its impact on society.

Investors need to take the lead, because it is cheaper and more efficient to incorporate security at the beginning of product development rather than adding it at the end, just as it is much cheaper to prevent fire than stop it from spreading after it has started. Businesses that prioritize security early can evaluate their options and make reasonable choices based on the nature of their business needs and the sensitivity of their data.

Here are four ways investors can influence more secure and responsible innovation.

Investor education

In order to close the knowledge gap between the tech community and investors, investors have to understand the critical nature of security in their investment portfolio companies. As cyber risks are increasing, it is important to educate investors on the need to assess cyber risk within the investing process. A better understanding of what makes technology more secure, an educated judgement of a company’s security posture and an ability to evaluate risk management strategy are becoming essential elements of thorough investment due diligence. Investors should learn about upcoming market trends, understand the importance of cybersecurity better, and be able to ask and challenge the current status quo of security in innovation.

Standard language

It is important that investors and the technology community speak the same language when referring to cybersecurity. Currently, investors speak one language, managers another, and technology managers a third. The need for a universal language is much more pronounced among smaller companies. In order to improve the understanding of cybersecurity and its importance, there should be a standard language for the investment community to address cybersecurity as a business risk, rather than just an IT issue.

This includes agreeing where cybersecurity expertise falls within the company; how cybersecurity risk is disclosed and measured; what the key cyber threats are; what should be included in a cybersecurity audit and assessment; and finally, details such as if the board is responsible for cybersecurity issues. Currently there is a wide gap between the investment community and technology innovators when referencing security. Agreeing on basic terms of reference will help bridge this gap.

Understand security’s impact on investments

As cyber threats continue to escalate, consumers are seeking more cybersecurity and questioning their data privacy. Companies that prioritize security in their development will gain an advantage over their competitors. According to the Ping Identity 2018 Survey, following a data breach, 78% of consumers are inclined to stop engaging with the affected brand online, and 36% said they would stop engaging with the brand completely. Nearly half (49%) of respondents said they wouldn’t engage a service or application that had experienced a recent data breach. As the survey shows, cyber breaches can be very damaging, especially to companies that are still establishing their name. A breach for a not well-known brand could be fatal.

As new digitally native generations join the consumer market, the demand for better embedded security will rise. According to the Deloitte/SSI 2016 Consumer Survey, younger generations (millennials and Gen Z) take more protective steps than older generations.

Due care standard

During the investment process, investors look at quality of earnings and revenue. Why aren’t investors looking at the quality of security of the company and its product? If there was a universally agreed due care standard that companies could be evaluated on, then investors could adjust investments and incentives accordingly. Such a cybersecurity due care standard should be inclusive and incorporate both basic cross-industry standards, as well as different levels of evaluation for different stages of a company’s development, from start-up to small and medium-size enterprise. If a due care standard is developed, companies can be evaluated and benchmarked on how they perform based on the due care standard in a fair and transparent way.

Investors and innovators have to find the right balance between fear and hope in developing new technologies. In order to do that, both communities have to speak the same language, and have a similar understanding of the importance of security and responsibility in innovation development.

the sting Milestones

Featured Stings

Can we feed everyone without unleashing disaster? Read on

These campaigners want to give a quarter of the UK back to nature

How to build a more resilient and inclusive global system

Stopping antimicrobial resistance would cost just USD 2 per person a year

Challenges facing the COVID-19 vaccination campaigns

Civilian deaths in Afghanistan hit record high – UN

Visiting North Korea, UN relief chief spotlights funding shortfall to meet humanitarian needs

Meet Alice, the battery-powered plane that could herald the age of electric air travel

Britain in and out of the EU

Statement by the Brexit Steering Group on UK government White paper

Cocaine and opium production worldwide hit ‘absolute record highs’ – major threat to public health says UN study

Ebola: EU releases additional €3.5 million to tackle epidemic

Voices of young climate action activists ‘give me hope’ says UN chief

European Semester 2019 Spring Package: Commission issues recommendations for Member States to advance sustainable and inclusive economic growth

Easing ‘classroom crisis’ in Côte d’Ivoire, brick by (plastic) brick

The United Kingdom’s decision to leave the European Union will impact young people’s future the most

5 ways COVID-19 has changed workforce management

Parliament to ask for the suspension of EU-US deal on bank data

Coronavirus Global Response: European Commission pledges €300 million to Gavi

Trump’s MAGA policy remains unchanged as EU warns to impose additional retaliation tariffs on US products

European Defence Fund on track with €525 million for Eurodrone and other joint research and industrial projects

COVID-19 creates a perfect storm for the extreme weather season

Healthcare for refugees: a necessary symbiosis of medicine and politics

EU climate law: MEPs want to increase emission reductions target to 60% by 2030

A geared turbofan at Pratt & Whitney's production hub in West Palm Beach (copyright: Pratt & Whitney - a UTC Company- 2018; Source: Pratt & Whitney's website, media center)

The EU Commission approves UTC’s acquisition of Rockwell Collins under conditions

Slovakia and its failure to abide by the European law

How to help an ageing population stay wealthy for longer

Soil pollution ‘jeopardizing’ life on Earth, UN agency warns on World Day

“Beyond the beach: tackling plastic pollution upstream”, a Sting Exclusive by Erik Solheim, Head of UN Environment

Google’s bare truth: Europe’s Chief denies EU accusations but admits they “don’t always get it right”

FROM THE FIELD: Persons with disabilities bike towards sustainability

Our health systems are under pressure. Here are 9 ways to remedy that

Hardware is a cybersecurity risk. Here’s what we need to know

Hatred ‘a threat to everyone’, urges Guterres calling for global effort to end xenophobia and ‘loathsome rhetoric’

What talent means in the post-COVID-19 workplace

What will Germany look like after the next election?

New legislation on transparency and sustainability of the EU risk assessment model in the food chain

This woman changed the world of work – and you’ve probably never heard of her

‘Grave consequences’ await if new deadly escalation of violence in Gaza continues – top UN official

The Dead Sea is drying up, and these two countries have a plan to save it

African elephants under continued threat of poaching, warns UN-backed report

AIESEC Vlog

Four million have now fled Venezuela, UN ramps up aid to children who remain

Ercom, cutting-edge Telco solutions from Europe

As ride-hailing firms drive into the future, who is being left behind?

Syrian crisis: €5.3 billion mobilised by donors for 2021 and beyond at 5th Brussels Conference

Carnage must stop in northwest Syria demands Lowcock, as attacks intensify

New round of bargaining for the 2014 EU budget late in autumn

Sudan: European Union provides €30 million in humanitarian assistance

At last Germany to negotiate the costs for a really cohesive Eurozone

UN evaluates progress in improving peacekeeping performance

The US + Britain trivialize mainland Europe, NATO and the EU

Khashoggi case highlights ‘very worrying practice’ of overseas abductions, says UN expert

What does global health translate into?

How Costa Rica’s environment minister talks to his daughter about climate change

Polluted lungs: health in the center of environment discussion

Here are 3 lessons Europe can learn from China’s flourishing start-ups

Geopolitics and investment in emerging markets after COVID-19

Canada needs to increase foreign aid flows in line with its renewed engagement

EU Ombudsman investigates the European Commission

Coronavirus: EU global response to fight the pandemic

SCADA Security Conference 2017 in Prague, Czech Republic

Brexit: Six more months of political paralysis or a May-Corbyn compromise?

COVID-19 vaccination campaigns and their challenges

More Stings?

Advertising

Speak your Mind Here

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s