ACHIEVING
CYBERRESILIENCE
INAUTOMOTIVE
SECURITY
INTHE
DRIVER’S
SEAT

CISOs in automotive
companies need to:
• Protect critical IT and manufacturing systems
• Manage the vulnerabilities of a broad
ecosystem of relationships
• Handle growing data demands
No industry is safe
from the threat of
cyberattacks
On average, automotive
companies had 160
targeted attacks in the
last year
160
2Copyright © 2018 Accenture Security. All rights reserved.

Security must be “business first”
3
Cybersecurity decision
making is elevated….
of automotive executives
say that cybersecurity
budget authorization rests
with the Board of
Directors.
30%
….and confidence in
cybersecurity
capabilities runs high…
of automotive executives
are confident that they
can quickly recover
manufacturing operations
in the event of a
cyberattack.
81%
….yet the reality is
less impressive
out of 33 cybersecurity
capabilities, automotive is
high-performing in just 18.
18/33
Copyright © 2018 Accenture Security. All rights reserved.

Three actions can help tackle
the next wave of cyberattacks:
Secure operational technology
environments
Safeguard the supply chain
Shift from product-oriented to
customer-centric business
4Copyright © 2018 Accenture Security. All rights reserved.

As OT environments become
more connected, they
become more vulnerable.
Threats include:
• Protecting intellectual property while
preventing production downtimes in the
age of the Industrial Internet of Things
• Managing the dramatic differences in the
environments of IT and OT, even as they
converge
Secure operational
technology (OT)
environments
of automotive
executives recognize the risks
from new business models
and the increase in attack
surface, less than global
respondents (82%).
71%
5Copyright © 2018 Accenture Security. All rights reserved.

Manufacturers must be confident that the security measures
applied extend beyond their four walls. Challenges include:
• Being reliant on third parties producing up to 70% of their product
• Managing more than 5,000 changeable car parts and thousands of different manufacturers
• Smaller manufacturers don’t operate the same security measures
• Maintaining security across a network of thousands of dealers and sales representatives
• Growing evidence of exploitation, e.g. compromising car systems
Safeguard the supply chain
6
of automotive
executives rate their third-party
cybersecurity high performing,
9% lower than global respondents.
50%
There are weaknesses in security across the entire supply chain:
of automotive
companies said they do not apply the
same security standards to their
partners as their own business.*
37%
Copyright © 2018 Accenture Security. All rights reserved.

New technologies and changing
customer expectations mean
automotive companies need to
think differently about what
they are selling and how.
Issues include:
• Managing huge data volumes
• Being more customer-centric/customer
experience focused
• Becoming a transportation services
provider e.g. mobility, connected services
Shift from product-
oriented to customer-
centric business
7
44%
42%
protect customer
information as part of their
cybersecurity strategy.
protect organization
information.
The pressure is on to protect
data vulnerabilities:
Copyright © 2018 Accenture Security. All rights reserved.

Automotive executives
know there is work to do
8
64% 47%
of automobile executives
hold their partners to
the same or higher
cybersecurity standards
as their business,
and audit regularly.
recognize they need to
improve security
monitoring.
44%
recognize they need to
improve cyber threat
analytics—the “basics”
of security programs.
Copyright © 2018 Accenture Security. All rights reserved.

The journey to accelerate value
9
01
Address security fundamentals
Harden and protect core assets, pressure-test resilience and automate
defenses using breakthrough technologies, intelligence and data.
02
Extend security to the wider ecosystem
Identify risk among third-party suppliers, manufacturers, and
dealers and support an ecosystem of vendors.
03
Create a safety-by-design culture
Create a safety culture for cybersecurity efforts, driven by a
next-generation CISO who is tech- and business-savvy.
Copyright © 2018 Accenture Security. All rights reserved.

About the research
10Copyright © 2018 Accenture Security. All rights reserved.
Automotive
executives
Companies with
revenues >US$6bn
Countries:
Australia | Brazil | France | Germany
Italy | Japan | Singapore | Spain
United Kingdom | United States
Survey conducted 2018
RESPONDENTS’
TITLES
Chief Information Officer
Chief Security Officer
Chief Compliance Officer
Chief Risk Officer
Corporate Security Officer
Chief Security Architect
101
63
10

Read the full report:
11
www.accenture.com/automotive-cyber-resilience
/showcase/accenture-industrial
/showcase/accentureconsulting
About Accenture
Accenture is a leading global professional services
company, providing a broad range of services and
solutions in strategy, consulting, digital, technology and
operations. Combining unmatched experience and
specialized skills across more than 40 industries and all
business functions—underpinned by the world’s largest
delivery network—Accenture works at the intersection of
business and technology to help clients improve their
performance and create sustainable value for their
stakeholders. With 459,000 people serving clients in
more than 120 countries, Accenture drives innovation to
improve the way the world works and lives.
Visit us at www.accenture.com.
Copyright © 2018 Accenture. All rights reserved.
Accenture, its logo, and New Applied Now are
trademarks of Accenture.
Stay Connected
@AccentureInd
@AccentureConsult
Copyright © 2018 Accenture Security. All rights reserved.
Note: Unless otherwise stated, the statistics in this point of view
represent retail respondents in the survey report “Gaining ground on the
attacker: 2018 State of Cyber Resilience,” Accenture 2018.
*Cyber Threatscape Report 2018, Midyear cybersecurity risk review, Accenture.