Nearly half (46 percent) of executive-level respondents to a Deloitte poll say their organizations have experienced a cybersecurity incident over the past year, with more than 1,500 surveyed professionals feeling only “somewhat confident” in their organization’s ability to respond to and remediate a cyber incident. Learn more: https://deloi.tt/2Ac1vEN

1. Cyber wargaming: Building cyber
resilience in an era of cyberattacks
Deloitte poll results from May 2018

2. Cyber wargaming cyber readiness poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 2
Methodology
Professionals participated in a Deloitte Dbriefs
webcast, titled “Cyber wargaming: Building
cyber resilience in an era of cyberattacks,” on
May 31, 2018. Answer rates differed by
question.
3,685
2

3. Cyber wargaming cyber readiness poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 3
Has your organization experienced a cybersecurity
incident during the past 12 months?
Votes Received: 2,889
Yes, 43.4%,
43%
No, 31.9%,
32%
Don't
know/not
applicable,
24.7%, 25%
Yes No Don't know/not applicable

4. Cyber wargaming cyber readiness poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 4
How confident are you in your organization’s ability to
respond to and remediate a cyber incident?
Votes Received: 3,156
24.1%
49.8%
12.0%
14.1%
Highly confident Somewhat
confident
Not confident Don't know/not
applicable
Series 1

5. Cyber wargaming cyber readiness poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 5
Have you participated in a cyber wargaming exercise at
your organization?
Votes Received: 3,286
Yes – within
the past six
months,
7.2%
Yes – within
the past 7-
12 months,
5.3%
Yes – within
the past 13-
24 months,
5.6%
No – my organization
conducts cyber
wargames, but I
have not
participated, 17.3%
No – my
organization does
not conduct cyber
wargames, 41.2%
-5%
0%
5%
10%
15%
20%
25%
30%
35%
40%
45%
50%

6. Cyber wargaming cyber readiness poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 6
Do you know your individual role within your
organization’s cyber incident response plan?
Votes Received: 2,989
Yes=31.2%
said they do NOT know or that their
individual role in their company’s cyber
incident response plan was not
applicable to them.
34.9%
No
33.9%
Not
applicable
68.8%

7. Cyber wargaming cyber readiness poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 7
What would be the biggest challenge for your
organization when responding to a cyber incident?
Votes Received: 2,791
16.6%
7.3%
28.8%
17.5%
29.8%
Lack of coordination between business
areas
Lack of clarity around leadership chain
of command
Lack of employee understanding of
the organization's cyber incident…
Lack of resources (funding, tools,
skills)
Don't know/not applicable

8. Cyber wargaming cyber readiness poll:Copyright © 2018 Deloitte Development LLC. All rights reserved. 8
Media contact
Nicole Hockin
Public Relations
Deloitte & Touche LLP
nhockin@deloitte.com
Full press release available on
Deloitte.com
EU General Data Protection Regulation:
Practical steps for compliance
8

9. The statements in this report reflect the aggregation of poll responses and are not intended to reflect facts or opinions
of any entities. All data, charts and statistics referenced and presented, as well as the representations made and
opinions expressed, unless specifically described otherwise, pertain only to the participants and their responses to the
Deloitte poll. The information obtained during the poll was taken “as is” and was not validated or confirmed by Deloitte.
This presentation contains general information only and Deloitte is not, by means of this presentation, rendering
accounting, business, financial, investment, legal, tax, or other professional advice or services. This presentation is not
a substitute for such professional advice or services, nor should it be used as a basis for any decision or action that may
affect your business. Before making any decision or taking any action that may affect your business, you should consult
a qualified professional advisor.
Deloitte shall not be responsible for any loss sustained by any person who relies on this presentation.
About Deloitte
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (“DTTL”), its network of member firms,
and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as “Deloitte Global”)
does not provide services to clients. In the United States, Deloitte refers to one or more of the US member firms of DTTL, their related entities that operate
using the “Deloitte” name in the United States and their respective affiliates. Certain services may not be available to attest clients under the rules and
regulations of public accounting. Please see www.deloitte.com/about to learn more about our global network of member firms.
Copyright © 2018 Deloitte Development LLC. All rights reserved.