Компания F6, specializing in cybercrime fighting technologies, has unveiled the first ‘Industry Cybersecurity Index’ for seven major sectors of the Russian economy, including the energy sector, retail, IT, transport and logistics, construction, industry, and financial services. The study examined 1,000 Russian companies and revealed that financial organizations exhibited the highest level of cybersecurity, while the retail sector faced significant vulnerabilities.
The index was developed by a team of F6 experts who analyzed various factors such as vulnerabilities, data leaks, corporate email security, and unnoticed ‘shadow’ assets that can serve as entry points for cybercriminals. The average cybersecurity score across these industries was rated at 5.2 out of 10, where 10 indicates minimal risk. Financial institutions led the ranking with an average score of 5.8, followed closely by the construction sector at 5.7, and industrial companies at 5.4. The retail sector scored the lowest at 4 points.
The superior cybersecurity performance of financial organizations can be attributed to their early encounters with severe cyber threats, including targeted attacks, ransomware, and financial fraud, prompting them to make significant investments in data protection. In contrast, other sectors, particularly industry, IT, and retail, began experiencing the repercussions of large-scale cyber attacks—such as cyber espionage, diversions, and DDoS attacks—primarily after 2022. Many companies in these sectors have only recently started to implement modern security practices.
Interestingly, the industrial sector showed the highest percentage of organizations with minimal risk (15% rated between 8 and 10 points). Four companies from the IT, financial, and industrial sectors achieved the maximum score of 10 points; however, a company in the manufacturing industry was also noted for the lowest evaluation at 0.2.
The IT sector leads in the average number of digital assets per company, averaging 5,934. Notably, one IT firm was connected to an astonishing 239,000 assets, indicating a critical need for automated and constant monitoring. Conversely, companies in the construction sector showed the least number of assets, averaging only 676.
‘In the face of rising cyberattacks and stricter regulations in the field of information security, we are prepared to assist businesses and government organizations in effectively assessing cyber risks and prioritizing cybersecurity strategies,’ stated Valery Baulin, General Director of F6. ‘I am confident that our new Cybersecurity Index will not only serve as a valuable tool for developing cybersecurity measures for individual companies but will also set an industry standard for cybersecurity.’
The F6 Cybersecurity Index is a practical resource for Chief Information Security Officers (CISOs) and information security teams, enabling them to identify weaknesses and assess cyber risks for individual companies, thereby facilitating the development of effective security strategies.