It has become much easier to attack than combat cybercriminals. The report suggests that the internet of tomorrow will almost certainly be less resilient, available and robust than it is today, and it will be more likely to initiate and cascade global shocks.

Risk managers, regulators and organizations with system-wide responsibility should focus on resilience and agility rather than prevention, the report suggests. With the interconnectedness of global business, combined with Internet dependency, risks can strike quickly and from any direction. Many businesses are left vulnerable.

Zurich provides recommendations for individual organizations in the report to better prepare and react to cyber hazards. However, the report indicates that organizations create comprehensive, customized plans for handling cyber risks.

Recommendations for individual organizations include:

Basic: regardless of the size of the organization, there is a relatively small set of actions to protect from the most cyber risk:

1. Provide application whitelisting
2. Use standard secure system configurations
3. Patch application software within 48 hours
4. Reduce the number of users with administrative privileges

Advanced: larger, more sophisticated organizations should certainly implement the 20 Critical Security Controls, but they also have the capability to engage in far more advanced cyber risk management.

1. Push out risk horizon
2. Cyber insurance
3. Demand more resilient and secure standards and products
4. More effective board-level risk management

Resilience: for all organizations, and in some ways, perhaps the most effective.

1. Redundancy
2. Incident response and business continuity planning
3. Scenario planning and exercises

Zurich and the Atlantic Council's report, "Beyond data breaches: global interconnections of cyber risk," is a culmination of a yearlong study regarding interrelated cyber hazards and underlying risks.