--- title: Cyber Incidents are the Biggest Business Risk of 2022 - So What Now? description: According to the Allianz Risk Barometer, the number one business risk for 2022 is “cyber incidents.” How can organizations best mitigate this risk? image: https://insights.comforte.com/hubfs/data%20protection%20methods%20blog%20header.jpeg --- [![Hubspot_blog_logo](https://insights.comforte.com/hs-fs/hubfs/Hubspot_blog_logo.png?width=295&name=Hubspot_blog_logo.png)](http://www.comforte.com) [![Subscribe](https://no-cache.hubspot.com/cta/default/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/ba125972-4bdc-4e47-b9a9-81df496120a0) [![cyber incidents business risk mitigation](https://insights.comforte.com/hubfs/data%20protection%20methods%20blog%20header.jpeg)](https://insights.comforte.com/cyber-incidents-are-the-biggest-business-risk-of-2022-so-what-now) [Thomas Stoesser](https://insights.comforte.com/author/thomas-stoesser) l May 19, 2022 l [Data Protection](https://insights.comforte.com/tag/data-protection) # Cyber Incidents are the Biggest Business Risk of 2022 - So What Now? After a year of unprecedented cyber-threat activity, the world’s risk managers are in agreement. The number one business risk for 2022 is “cyber incidents.” This is only the third time in the 11-year history of the [Allianz Risk Barometer](https://www.agcs.allianz.com/news-and-insights/reports/allianz-risk-barometer.html) that “business interruption” has not come in at the top. Yet the two are closely related. The question is how can organizations mitigate these risks and drive business success through 2022 and beyond? Cyber incidents threaten not only to disrupt business operations but also cause significant financial and reputational damage. A data-centric security approach will help to minimize a large portion of this risk by putting sensitive information out of the reach of attackers. It could also open the door to reduced insurance premiums and broader coverage. ## When business is interrupted The barometer is compiled from interviews with 2,650 risk management experts from 89 countries. It revealed that 44% of respondents chose cyber incidents as their top risk for 2022, up from 40% last year when the risk was ranked third behind business interruption and the COVID-19 pandemic. Yet the truth is that all three are related. The pandemic has spurred massive [investments in digital transformation](https://www.mckinsey.com/business-functions/strategy-and-corporate-finance/our-insights/how-covid-19-has-pushed-companies-over-the-technology-tipping-point-and-transformed-business-forever) which, without adequate enhancements in security posture, have left organizations’ cyber-attack surfaces dangerously exposed. Software vulnerabilities, misconfigured systems such as cloud databases, and supply chain threats all loom large, as do more traditional user-centric risks such as phishing. Many of these have been made more acute by the new trend for mass remote working. The resulting security breaches can directly interrupt business operations, sometimes halting them altogether. According to the Allianz report, ransomware (57%) and data breaches (57%) were ranked as the top two concerns for 2022. In fact, [most ransomware attacks](https://www.coveware.com/blog/2022/2/2/law-enforcement-pressure-forces-ransomware-groups-to-refine-tactics-in-q4-2021) today also contain a data breach element, known as “double extortion,” in which the attackers not only prevent you from accessing your files, they also threaten to leak any sensitive data they may have gained access to. Both can also result in significant financial and reputational damage including: - Legal costs (especially if class action suits follow data exposure) - IT overtime - Third-party forensics and investigation - Lost sales - Productivity losses - Declining share price - Customer churn and brand damage ## Hedging risk through insurance This is particularly bad news for organizations that process and store large amounts of data. So what can be done? Cyber-insurance is a popular option. But having paid-out significant sums as ransomware attacks ramped up during 2020 and 2021, many providers are being more selective about whom they offer policies to. And coverage is sometimes reduced, or else, [premiums are subject to massive price increases](https://www.ajg.com/us/news-and-insights/2022/jan/2022-cyber-insurance-market-report/). As described in the Allianz report, pre-contract assessments increasingly look for elements of security best practice such as regular backups, patching, training and multi-factor authentication. If they’re not present, the customer may be saddled with reduced coverage and/or higher premiums. To these best practices we can add data-centric security. ## Best practice cyber-hygiene Data-centric security means applying technologies such as encryption and tokenization to all sensitive data, wherever it is across the distributed IT environment. By doing so, organizations effectively render it useless to any threat actor. That means, in the likely event they manage to bypass some security controls and access data stores—whether as part of a data heist or a ransomware attack—the impact will be minimal. With this peace of mind, organizations can rest easy that business interruption and risk is minimized. They’ll be able to accelerate compliance with [PCI DSS](https://insights.comforte.com/pci-dss-4.0-and-the-need-for-continuous-data-centric-security?hsLang=en), GDPR, HIPAA and other important regulatory frameworks. And they could benefit from more insurance coverage at a lower premium. There are of course other risks to consider under the umbrella of “cyber incidents.” But with data-centric security, one of the main ones is no longer so intimidating. --- | Share this:  | [![LinkedIn](https://insights.comforte.com/hubfs/Social%20Icons/linkedin%20icon.png)](https://www.linkedin.com/shareArticle?mini=true&url=https://insights.comforte.com/cyber-incidents-are-the-biggest-business-risk-of-2022-so-what-now&utm_medium=social&utm_source=linkedin) | [![Bluesky](https://insights.comforte.com/hubfs/Social%20Icons/bluesky_logo.png)](https://bsky.app/intent/compose?url=https://insights.comforte.com/cyber-incidents-are-the-biggest-business-risk-of-2022-so-what-now&utm_medium=social&utm_source=Bluesky) | ![Twitter](https://insights.comforte.com/hubfs/Social%20Icons/twitter_x_logo-1.png) | [![XING](https://insights.comforte.com/hubfs/Social%20Icons/xing-color2.png)](https://www.xing.com/spi/shares/new?url=https://insights.comforte.com/cyber-incidents-are-the-biggest-business-risk-of-2022-so-what-now&utm_medium=social&utm_source=xing) | [![Email](https://insights.comforte.com/hubfs/Social%20Icons/email%20icon.png)](mailto:?subject=Check%20out%20https://insights.comforte.com/cyber-incidents-are-the-biggest-business-risk-of-2022-so-what-now&utm_medium=social&utm_source=email%20&body=Check%20out%20https://insights.comforte.com/cyber-incidents-are-the-biggest-business-risk-of-2022-so-what-now&utm_medium=social&utm_source=email) | | --- | --- | --- | --- | --- | --- | ## A hacker with tokenized data is like a thief in an empty vault. To learn more about how data-centric security can keep data protected end-to-end so it's useless to attackers, check out our solution brief: [![Download Solution Brief](https://no-cache.hubspot.com/cta/default/4026697/225e042e-61c6-48a9-938c-52ccf764b23c.png)](https://cta-redirect.hubspot.com/cta/redirect/4026697/225e042e-61c6-48a9-938c-52ccf764b23c) ### Related posts ![Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/hubfs/comforte%20AG_%20Reuse%20Reward_%20How%20Banks%20Can%20Safely%20Unlock%20the%20Value%20of%20Their%20Data_03.2025.png) Mar 12, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Payments Transformation](https://insights.comforte.com/tag/payments-transformation) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) The financial world is awash with data. But too few organizations are able to use it effectively. In [Bank Director’s *2025 Technology Survey*](https://www.bankdirector.com/wp-content/uploads/2025/09/2025TechReport-OpenVersion.pdf), one-third of US banking leaders cite an inability to harness data as a top technology challenge facing their... [Read more](https://insights.comforte.com/reuse-reward-how-banks-can-safely-unlock-the-value-of-their-data?hsLang=en) ![Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/hubfs/comforte%20AG_Delivering%20a%20Secure%2c%20Trusted%20Foundation%20for%20Cloud%20Growth%20at%20LGT_01.2026.png) Jan 15, 2026 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Business Value](https://insights.comforte.com/tag/business-value) ### [Delivering a Secure, Trusted Foundation for Cloud Growth at LGT](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) There’s a world of difference between retail and private banking. While the former is transactional and focused on the mass market, the latter is built on trust and personal relationships. That trust can be hard won, but is easily lost, especially... [Read more](https://insights.comforte.com/delivering-a-secure-trusted-foundation-for-cloud-growth-at-lgt?hsLang=en) ![Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/hubfs/comforte%20AG_Top%20Indicators%20You%20Have%20a%20Cybersecurity%20Problem_and%20What%20to%20Do%20About%20It.png) May 22, 2025 l [Data Protection](https://insights.comforte.com/tag/data-protection) , [Digital Enablement](https://insights.comforte.com/tag/digital-enablement) ### [Top Indicators You Have a Cybersecurity Problem—and What to Do About It](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) Data is both blessing and curse to the modern enterprise. Yes, when analyzed effectively it can surface intelligence to improve decision making, customer engagement, process efficiency and, ultimately, drive revenue. But it also represents a major... [Read more](https://insights.comforte.com/top-indicators-you-have-a-cybersecurity-problem-and-what-to-do-about-it?hsLang=en) ### Service - [Contact](https://www.comforte.com/contact/) - [About us](https://www.comforte.com/company/) - [Blog](https://insights.comforte.com/) - [Press Releases](https://www.comforte.com/company/press-releases/) - [Career](https://www.comforte.com/company/career/) - [Resources](https://www.comforte.com/resources/) ### Germany comforte AG Abraham-Lincoln-Str. 22 65189 Wiesbaden Germany Phone: + 49 611 93199 00 Fax: + 49 611 93199 05 ### Australia comforte PTY Suite 20, 1 Rivett Road North Ryde NSW 2113 Australia Postal Address: PO Box 1710 Lane Cove NSW 1595 Australia Phone: +61 2 8197 0272 ### USA comforte Inc. 30 Wall Street, 8th Floor New York, NY 10005-2205 USA Phone: +1-646-438-5716 ### Singapore comforte Asia Pte. Ltd. 1 Raffles Place, #19-61 Tower 2  Singapore 048616 Phone: +65 6808 5507 - [Sitemap](https://www.comforte.com/sitemap/) - [Legal Notice](https://www.comforte.com/legal-notice/) - [Privacy Policy](https://www.comforte.com/privacy-policy/) © comforte AG 2026