Digital economy: Is a perfect storm looming in cyber­security?

The headlines about ever-new attacks make it clear: The risks to IT security are increa­sing and are expec­ted to become even more unpredic­table this year. However, there is also good news – the cyber­security industry is ramping up with cutting-edge technolo­gies and growing at a rapid pace. Thematic investments specia­lizing in the digital economy could benefit from this.

Bertrand Born and Luca Menozzi

0%
In the interview series ‘Themenfonds Talk’, portfolio manager Bertrand Born (right) and Samuel Gerber discuss the investment opportunities in the field of cyber security.

Since the Crowdstrike crash last summer – the largest IT outage in history – headlines about cybersecurity have been relentless. The hacker attack on the largest US water supplier, American Water, last fall demonstrated that even critical infrastructure for sustainable development can be affected. And in mid-February, around 2.500 experts gathered at the ‘Swiss Cyber Security Days’ conference in Bern to discuss how to deal with the issue of cyber in the face of exponentially growing technology.

Is something brewing? According to the findings of the "Global Cybersecurity Outlook 2025" published by the World Economic Forum (WEF) and consulting firm Accenture last January, IT users could indeed be facing the perfect storm in the coming months. The authors highlight several developments negatively impacting cybersecurity.

Digital Economy Creates New Entry Points

Firstly, increasing geopolitical tensions are leading to an (even) more insecure overall environment. The unpredictability is further heightened by complex supply chains and dependencies in global trade. Additionally, new technologies such as Artificial Intelligence (AI) provide cybercriminals with powerful new tools.

In general, the forces of digitalization continue to be felt: The rapid advancement of internet connectivity is increasingly blurring the line between cyberspace and the real world, creating new entry points for cybercriminals.

Conversely, the targets of such attacks appear increasingly vulnerable. Especially in emerging markets and among smaller entities like SMEs, confidence in their own defenses is shaken, as the WEF study survey shows. 38% of the surveyed public organizations consider themselves insufficiently resilient to attacks. According to the report, private sector actors feel somewhat more secure, with 10% of survey participants fearing a lack of resilience.

Ransomware Attacks Particularly Feared

This does not mean that companies take cyber risks lightly. In a survey by consulting firm Capgemini from 2024, 92% of organizations reported experiencing a security breach, compared to 51% three years earlier. Successful attacks are thus increasing significantly (see graph below). And they are costly: according to an IBM report from 2024, the average cost of a "hack" is estimated at around USD 4.8 million, with a rising trend. Often more severe are the long-term consequences: loss of reputation and damaged customer trust can lead to permanent business losses.

As the WEF report shows, so-called ransomware attacks are particularly feared: hackers block IT services or data of the victim and demand ransom for their release. Companies are also concerned about fraud schemes such as phishing or the risk of supply chain disruptions. "Distributed Denial of Service" (DDoS) attacks, where websites are overwhelmed with numerous requests and temporarily crippled, are also considered dangerous.

Financial Damage from Cyber Attacks in the USA

Sources: Cybercrime: monetary damage United States 2023 | Statista

Cybersecurity with 10% Growth?

The ubiquity of the internet means that virtually any organization can fall victim to such attacks; the healthcare sector, with its sensitive patient data, has proven to be particularly "in demand" from a hacker's perspective – recently, the largest US health insurer, UnitedHealth, had to announce that a hack in 2024 affected the data of 190 million people, as the newswire "Reuters" reported. 

Cybercriminals also target large sums of money managed by the financial sector or critical infrastructure such as energy and water supply. A successful attack here can have dramatic consequences for public safety and health.

In light of the opportunities presented by the long-term investment theme of the digital economy, there is also good news in this complex situation: the segment of providers of cybersecurity services and solutions is developing just as dynamically. The industry is growing annually by more than 10% (see graph below), and there are many innovative solutions.

Meanwhile. the "Cyber Market Map" by consulting firm McKinsey estimates that the sales market for such solutions stood at USD 140 to 150 billion in 2021 – and that would be only a tenth of the total addressable market.

Cybersecurity Market Revenue Forecast

Sources: Cybersecurity - Worldwide | Statista Market Forecast (figures estimated from 2024)

From the Cloud to Zero-Trust

This seems plausible when considering that many companies still provide only a minimal level of security. Many smaller organizations, which were previously disconnected from the internet, are, in our opinion, not yet or barely equipped with security tools. The current WEF report also identifies a growing gap – between often less resilient SMEs and large corporations that can more easily afford the arms race with hackers. The need for catching up appears significant – another driver for the cybersecurity market.

Providers in this sector are also relying on cutting-edge technologies, confirming the future viability of the digital economy investment theme. Advanced, cloud-based security solutions are scalable and can respond relatively quickly to new threats. AI systems analyze vast amounts of data and can detect suspicious activities early on. So-called zero-trust applications can prevent unauthorized individuals from gaining unnoticed access to systems. Users are granted access only to the specific areas they request. Each additional service checks whether the existing login credentials justify access.

Complex Applications Speak for Thematic Funds

In summary, increasing digitalization makes cybersecurity indispensable for every company. Meanwhile, innovative technologies such as AI and cloud solutions drive innovation and efficiency in this segment of the digital economy. Investors interested in the opportunities of the digital economy investment theme face a highly dynamic environment and complex technologies that require a lot of expertise to understand.

Actively managed thematic funds may offer an easy access to selected companies in the cyber security industry.

The strategy of the ‘Swisscanto (LU) Equity Fund Sustainable Digital Economy’ investment fund, for example, takes into account companies that can make a positive contribution to the digital transformation of numerous sectors of the economy with their products, services and manufacturing methods, with a view to shaping a more sustainable future. The investment universe includes, among others, companies in the cyber security industry. The investment fund, which is managed by a proven team of asset management experts from Zürcher Kantonalbank, also offers a high degree of sustainability.

Three takeaways on cybersecurity and investing in thematic funds on digitalisation

  1. The advance of digitalisation and networking makes cyber security indispensable for every company.
  2. Modern technologies are driving innovation and growth in the cyber security sector. This is also likely to be of interest when investing in thematic funds and in the long-term investment theme of digitalisation.
  3. Cyber security is a protective shield for sustainable digitalisation. This is an important finding for anyone who wants to take sustainability into account when investing in thematic funds.

Investment theme «Digital Economy»: Insights

0%
Portfoliomanager Bertrand Born mit Insights über das Thema Digital Economy und dessen Anlagechancen.

Legal Disclaimer Switzerland and international

This document only serves advertising and information purposes, is for distribution in Switzerland only and is not directed at persons in whose nationality or place of residence prohibit access to such information under applicable law. Where not indicated otherwise, the information concerns the collective investment schemes under the law of Luxembourg managed by Swisscanto Asset Management International S.A. (hereinafter "Swisscanto Funds"). The products described are undertakings for collective investment in transferable securities (UCITS) within the meaning of EU Directive 2009/65/EC, which is governed by Luxembourg law and subject to the supervision of the Luxembourg supervisory authority (CSSF). This document does not constitute a solicitation or invitation to subscribe or make an offer to purchase any securities, nor does it form the basis of any contract or obligation of any kind. The sole binding basis for the acquisition of Swisscanto Funds are the respective legal documents (management regulations, sales prospectuses and key information documents (PRIIP KID), as well as financial reports), which can be obtained free of charge at https://products.swisscanto.com as well as at Swisscanto Fondsleitung AG, Bahnhofstrasse 9, CH-8001 Zurich (also acting as representative of the Luxembourg Swisscanto funds in Switzerland) or in all offices of Zürcher Kantonalbank. Paying Agent for the Luxembourg Swisscanto funds in Switzerland is Zürcher Kantonalbank, Bahnhofstrasse 9, CH-8001 Zurich. Information about the sustainability-relevant aspects in accordance with the Regulation (EU) 2019/2088 as well as Swisscanto's strategy for the promotion of sustainability and the pursuit of sustainability goals in the fund investment process are available on the same website. The sub-fund referred to in the document is subject to Article 9 of Regulation (EU) 2019/2088. The distribution of the fund may be suspended at any time. Investors will be informed about the deregistration in due time. The investment involves risks, in particular those of fluctuations in value and earnings. Investments in foreign currencies are subject to exchange rate fluctuations. Past performance is neither an indicator nor a guarantee of future success. The risks are described in the sales prospectus and in the PRIIP KID. The information contained in this document has been compiled with the greatest care. Despite professional procedures, the correctness, completeness and topicality of the information cannot be guaranteed. Any liability for investments based on this document will be rejected. The document does not release the recipient from his or her own judgment. In particular, the recipient is recommended to check the information for compatibility with his or her personal circumstances as well as for legal, tax and other consequences, if necessary, with the help of an advisor. The prospectus and PRIIP KID should be read before making any final investment decision. The products and services described in this document are not available to U.S. persons under the relevant regulations (in particular Regulation S under the U.S. Securities Act of 1933).

Data as at (where not stated otherwise): 11.2024

© Zürcher Kantonalbank. All rights reserved.
 

This document only serves advertising and information purposes and is not directed at persons in whose nationality or place of residence prohibit access to such information under applicable law. Where not indicated otherwise, the information concerns the collective investment schemes under the law of Luxembourg managed by Swisscanto Asset Management International S.A. (hereinafter "Swisscanto Funds"). The products described are undertakings for collective investment in transferable securities (UCITS) within the meaning of EU Directive 2009/65/EC, which is governed by Luxembourg law and subject to the supervision of the Luxembourg supervisory authority (CSSF).

This document does not constitute a solicitation or invitation to subscribe or make an offer to purchase any securities, nor does it form the basis of any contract or obligation of any kind. The sole binding basis for the acquisition of Swisscanto Funds are the respective published legal documents (management regulations, sales prospectuses and key information documents (PRIIP KID), as well as financial reports), which can be obtained free of charge at https://products.swisscanto.com/. Information about the sustainability-relevant aspects in accordance with the Regulation (EU) 2019/2088 as well as Swisscanto's strategy for the promotion of sustainability and the pursuit of sustainability goals in the fund investment process are available on the same website. The sub-fund referred to in the document is subject to Article 9 of Regulation (EU) 2019/2088.

The distribution of the fund may be suspended at any time. Investors will be informed about the deregistration in due time. The investment involves risks, in particular those of fluctuations in value and earnings. Investments in foreign currencies are subject to exchange rate fluctuations. Past performance is neither an indicator nor a guarantee of future success. The risks are described in the sales prospectus and in the PRIIP KID. The information contained in this document has been compiled with the greatest care. Despite professional procedures, the correctness, completeness and topicality of the information cannot be guaranteed. Any liability for investments based on this document will be rejected. The document does not release the recipient from his or her own judgment. In particular, the recipient is recommended to check the information for compatibility with his or her personal circumstances as well as for legal, tax and other consequences, if necessary, with the help of an advisor. The prospectus and PRIIP KID should be read before making any final investment decision.

An overview of investors' rights is available at https://www.swisscanto.com/int/en/legal/summary-of-investor-rights.html.

The products and services described in this document are not available to U.S. persons under the relevant regulations (in particular Regulation S under the U.S. Securities Act of 1933). Data as at (where not stated otherwise): 11.2024

© Zürcher Kantonalbank. All rights reserved.