Three-quarters of the financial sector institutions have implemented BCM (Business Continuity Management) processes, thanks to which they have a system of pre­ vention and recovery to assess the level to which they and their clients are endangered. As last year, financial institutions had the highest investments in cyber secu­ rity of all the organisations questioned. INDUSTRY & ENERGY: MORE ATTACKS BUT LOW IMPACTS During 2020, the industry and energy sectors encountered more attacks and attempts than the average in other sectors (Chart 27). Only 4% of these resulted in cyber incidents, the impacts of which the institutions handled immediately (in almost half the cases) or with­ in several hours. As many as 90% of the respondents consider the cyber security of their organisations fully or rather sufficient, compared to the average of 70% for all sectors. As many as 92% of organisations in the energy sector and 58% of institutions in industry have cyber incidents incorporated in their crisis communication directive, compared to only half of organisations on average in the other monitored sectors. Although a quarter of the organisations classified supply chain attacks as serious, half the respondents stated that they were the least frequent. Even so, two-thirds of them perceive the threat of supply chain attacks on their institutions as moderate or high. Chart 27: How many cyberattack attempts did organisations from industry and the energy sector detect in 2020? (%) Industry & Energy Average of all sectors 48% 39% 40 31% 25% 20% 20 13% 8% 8% 4% 4% 0 0 1–10 11–20 21–30 OTHER More than half the organisations plan to increase their cyber security budgets in the coming year, despite the fact that 54% of the respondents consider their organisation’s cyber security investments to be suf­ ficient. At the same time, 67% of the respondents from the energy sector stated that they had sufficient legal expertise in cyber security, which is considerably above the all-sector average. As for setting up processes, 92% of organisations in both sectors create offline backups of their critical systems and test them, and nearly half the respondents from both sectors have implemented BCM processes, com­ pared to the all-sector average of 23%. HEALTHCARE: A TEMPTING RANSOMWARE ATTACK TARGET Czech hospitals and other healthcare facilities were a very attractive ransomware attack target in 2020. The focusing on such institutions can largely be attributed to the ongoing COVID-19 pandemic, which is putting high pressure on healthcare provision. Consequently, the chances of the attackers being paid the required ransom are higher. In 2020, the NÚKIB participated in dealing with nearly 20 security incidents in the healthcare sector, most often associated with phishing, ransomware attacks, and the exploitation of vulnerabilities in systems. The most significant cases handled were those of the University Hospital Brno and the Psychiatric Hospital Kosmonosy (for more details, see the chapter Cyber Security Incidents from the Perspective of the NÚKIB). THE UNITED STATES OF AMERICA EXPRESSED CONCERN ABOUT THE ATTACKS ON THE CZECH HEALTHCARE SECTOR In the first half of the year, Czech hospitals were exposed to a high cyberattack threat. Among others, Michael Pompeo, the then United States Secretary of State, expressed his support for the Czech Republic in combating the pandemic as well as ensuring cyber security, stating that the USA was concerned about the situation and that anybody participating in such activity had to be ready to bear the consequences of their actions. He also called upon ‘the actors in question to refrain from carrying out disruptive malicious cyber activity against the Czech Republic’s healthcare system or similar infrastructure elsewhere’.xvii Targets of Cyberattacks 23