CONCLUSION 1 Systemic risks

There are hidden and systemic risks inherent in the emerging technology environment, which will require significant changes to the international and security community response to cybersecurity. Policy interventions are required that incentivize collaboration and accountability on the part of both businesses and governments.

CONCLUSION 2 Capability gaps

There are gaps in the current operational cybersecurity approaches that need to be addressed. Defending ourselves against evolving threats requires new cybersecurity tools, as well as an understanding of how to effectively deploy these new solutions, at pace, throughout global systems. The attack surface associated with new technology use needs to be addressed. Policy that incentivizes higher standards of care in technology and service delivery is needed.

CONCLUSION 3 Leadership action

Business leaders need the ability to plan more strategically for emerging risk so they can ensure that the organizations delivering the most critical infrastructures do not suffer failures that are catastrophic for societies.