Cyber attack aftermath a big issue for global organisations

BY Fraser Tennant

Global organisations are more adept than ever at detecting a cyber attack but are struggling to cope with the aftermath of a breach, according to a new survey by EY.

In ‘Path to cyber resilience: Sense, resist, react’, EY’s 19th Global Information Security Survey (GISS) 2016-17, some of the most compelling cyber security issues facing businesses in today’s digital ecosystem are examined, with respondents indicating that cyber security threats, such as malware, phishing, cyber security to steal financial information, or cyber attacks to steal intellectual property or data, are on the rise.

EY’s findings show that although 50 percent of the 1735 global organisations surveyed said they could detect a sophisticated cyber attack – due to investments in cyber threat intelligence to predict what they can expect from an attack, continuous monitoring mechanisms, security operations centres (SOC) and active defence mechanisms – 86 percent said that, despite these investments, their cyber security function does not fully meet their organisation's needs.

Additionally, 64 percent of organisations stated that they did not have a formal threat intelligence programme or had only an informal one at best. When it came to the matter of identifying vulnerabilities, 55 percent of respondents said they did not have vulnerability identification capabilities or had only informal capabilities. Moreover, 44 percent indicated they did not have a SOC to continuously monitor for cyber attacks.

"Organisations have come a long way in preparing for a cyber breach, but as fast as they improve, cyber attackers come up with new tricks,” said Paul van Kessel, EY global advisory cyber security leader. “Organisations therefore need to sharpen their senses and upgrade their resistance to attacks. They also need to think beyond just protection and security to 'cyber resilience' – an organisation-wide response that helps them prepare for and fully address these inevitable cyber security incidents.

When asked about any recent cyber security incidents, 57 percent of respondents said they had experienced an incident. Furthermore, 48 percent cited outdated information security controls or architecture as their highest vulnerability – a 34 percent increase on the findings of the 2015 survey.

Mr van Kessel continued: “In the event of an attack organisations need to have a plan and be prepared to repair the damage quickly. If not, they put their customers, employees, vendors and ultimately their own future, at risk."

Report: ‘Path to cyber resilience: Sense, resist, react’.

2017: the year of business risk and uncertainty

BY Fraser Tennant

2017 will be a year of heightened risk and uncertainty for businesses, largely driven by the results of the US election and the UK EU referendum (Brexit) and their impact on globalisation and free trade, according to a RiskMap forecast published this week by Control Risks.

The RiskMap – an annual study highlighting the most significant underlying trends in global risk and security – also notes the risks posed by political, cyber and terrorism threats, as well as president-elect Donald Trump’s tough stance regarding the global regulatory environment.

As a result of the uptick in the range of threats, Control Risks reveals that many businesses now see little distinction between perceived safe domestic markets and foreign ones rife with challenges.

In summary, the RiskMap identifies the key risks for businesses in 2017 as being: (i) political populism exemplified by president-elect Trump and Brexit; (ii) persistent terrorist threats; (iii) increasing complexity of cyber security; (iv) intensifying geopolitical pressures driven by nationalism, global power vacuums and proxy conflicts; and (v) the militarisation of strategic confrontations by accident or miscalculation.

“The unexpected US election and Brexit referendum results that caught the world by surprise have tipped the balance to make 2017 one of the most difficult years for business’ strategic decision making since the end of the Cold War,” said Richard Fenning, chief executive of Control Risks.

“The catalysts to international business – geopolitical stability, trade and investment liberalisation and democratisation – are facing erosion. The commercial landscape among government, private sector and non-state actors is getting more complex,” he added. 

In response to the high levels of complexity and uncertainty forecast for 2017, Control Risks suggests that company boards should undertake a comprehensive review of their approach to risk management. The strategies they deploy to “protect value and seize opportunity in 2017”, will, according to the report, determine whether organisations are defined as Arks (having a defensive focus on core markets), Sharks (seeking to target new opportunities) or Whales (becoming too big to fail).

Mr Fenning continued: “With the seismic shift in risk scenario planning now required by businesses, we can expect the competitive playing field in many industries to see significant change as organisations respond in different ways to the multitude of complexities facing them. By the end of 2017 we will know whether or not the global economy withstood the shocks and turbulence of 2016, if the US opted for a new definition of how to exercise its power and if the great experiment in globalisation remains on track.”

Report: RiskMap 2017

Unicredit unit sold to Amundi

BY Richard Summerfield

Italy’s biggest bank, UniCredit SpA, has announced that it is to sell asset manager Pioneer to French fund management firm Amundi in a deal worth $3.75bn.

According to the terms of the deal, Amundi will finance the acquisition through a combination of a €1.4bn capital increase, around €600m of senior subordinated debt and about €1.5bn in existing capital. UniCredit will also receive an extraordinary dividend of €315m from Pioneer before the deal is completed. The dividend will take the total value of the transaction to around $4.10bn. The deal is expected to close in the first half of 2017.

"Thanks to a long term distribution agreement, UniCredit's customers will have access to an extended range of quality products and services whilst the Group will reap the benefit of additional fee income from expected increased sales," UniCredit chief executive Jean Pierre Mustier said in a statement. "The transaction means Italy becomes Amundi's second largest domestic market and Amundi will turn Milan into one of its core investment hubs, creating new jobs and ensuring close proximity to UniCredit, our teams and clients."

The sale of the Amundi unit is the latest in a series of moves by UniCredit to divest some of its holdings, and to shore up its balance sheet.  In July, the company agreed to sell its 32.8 percent stake in Pekao bank in Poland to state-owned insurance group PZU for around $2.6bn. UniCredit also sold a 30 percent stake in FinecoBank SpA in October for around £2bn.

UniCredit, under the leadership of the new chief executive Jean Pierre Mustier, is expected to launch a new share sale this week, with the hope of raising around €13bn. UniCredit’s recent financial difficulties are allegorical of the wider Italian banking sector, which has been experiencing considerable difficulty for some time.

Through the acquisition of Pioneer, which manages around £186bn worth of assets, Amundi expects to generate around €150m in full-year cost synergies within three years as it merges investment platforms and streamlines support functions. The company also expects the acquisition to boost its revenue by €30m.

News: France's Amundi to buy Pioneer from UniCredit for 3.6 billion euros

Digital disruption driving deals

BY Richard Summerfield

2017 is likely to see increased mergers and acquisitions (M&A) activity in the media and entertainment (M&E) sector, according to EY’s latest Media & Entertainment Capital Confidence Barometer, released earlier this week.

Much of the dealmaking activity in the M&E space in the coming year will be likely be driven, in part, by digital disruption and convergence. The emergence of digital disruption and sector blurring in particular has proved a key driver of recent dealmaking in the M&E space, with 31 percent of the executives surveyed by EY citing convergence as the biggest disrupter in the industry of late. Increasingly, companies are expanding into previously uncharted territory. Sixty-seven percent saw digital disruption as the main catalyst for deal aking in the coming year.

In a statement announcing the report, John Harrison, EY's Global Media & Entertainment Leader, Transaction Advisory Services, said, “Unprecedented, unrelenting advances in technology and the swift emergence of new platforms and services are driving change in consumer behaviours, upending long-standing media ecosystems and blurring sector lines. Companies are aggressively seeking the innovation needed to position for future success and are looking to acquisitions, alliances and joint ventures to catalyse transformation.”

Despite the political and economic uncertainty permeating the globe, there is an underlying confidence in the M&E industry, particularly when it comes to dealmaking. In spite of persistent macroeconomic challenges, 73 percent of respondents perceived the global economy as stable or improving.

From a dealmaking perspective, 85 percent of respondents expressed confidence in the quality of acquisition opportunities available to M&E companies in the year to come. Furthermore, 94 percent of respondents claimed they had stable to positive confidence in the likelihood of closing a deal in 2017. More than half of respondents (56 percent) claimed that they expect their company to actively pursue an acquisition in the next 12 months, up from 46 percent in July 2016. Forty-eight percent said they have five or more deals in the pipeline.

Cross-border dealmaking is likely to be particularly prevalent in 2017, with 42 percent of executives claiming that their companies will be targeting a cross-border acquisition in the coming year. The US, France, the UK, Germany and China are the top five most likely destinations. The UK was the most sought after investment destination in EY’s previous report.

Report: Media & Entertainment Capital Confidence Barometer

New ‘Basel IV’ capital requirements proposed for banking sector

BY Fraser Tennant

In what is a crucial period for the European economy, new proposals for setting the capital requirements for the banking sector have been officially unveiled by the Basel Committee on Banking Supervision (BCBS).

The proposals, supposedly the final set of revisions being made to the Basel III Framework (part of the BCBS’s continuous effort to enhance the banking regulatory framework), clarify rules on combating money laundering and terrorist financing in correspondent banking. Many commentators have dubbed the latest modifications, ‘Basel IV'.

The first accord, Basel I, had three objectives: (i) to make sure banks held sufficient capital to cover their risks; (ii) to level the playing field among international banks competing cross-border; and (iii) to facilitate comparability of the capital positions of banks.

The BCBS’s revised proposals are intended to ensure that banks conduct correspondent banking business with the best possible understanding of the applicable rules on anti-money laundering and countering the financing of terrorism. According to the BCBS, the draft proposals reflect growing concerns in the international community about banks avoiding these risks by withdrawing from correspondent banking, which may, in turn, affect the ability to send and receive international payments in entire regions.

"The proposed revisions develop the application of the risk-based approach for correspondent banking relationships, recognising that not all correspondent banking relationships bear the same level of risk," says the report.

The proposals follow the publication by the Financial Action Task Force (FATF) of its guidance on correspondent banking services (October 2016). The BCBS seeks to clarify the expectations of banking supervisors, consistent with the FATF standards and guidance.

In response to the BCBS’s proposed revisions (as well as those already globally agreed), the European Commission has published its first proposals for calibrating capital and liquidity requirements in the form of a Capital Requirements Directive and Resolution (CRD V and CRR II) – proposals which address the market risks inherent in banks’ trading activities, as well as introducing the concept of “proportionality".

“Europe’s move to implement ‘proportionality’ is an important step," said Colin Brereton, PwC’s EMEA FS advisory services leader. “As in the US, the largest EU banks will remain subject to the full scope of regulation; ultimately, this should improve the ability of smaller banks to compete, to the benefit of bank customers.”

The consultation on the BCBS’s proposals is open until 22 February 2017.

Report: Basel Committee on Banking Supervision - Consultative Document