- Cybersecurity Emerges as a Top Threat to Tech Companies –
Growth in the tech industry has hit a temporary speed bump as the market recovers from the rough start to the year and more caution from investors. The 2016 BDO Technology RiskFactor Report, which analyzes the risk factors listed in the most recent SEC 10-K filings of the 100 largest publicly traded technology companies, found that over three-quarters (76 percent) of technology companies cite uncertain financial performance as a top risk, up seven percentage points from last year.
"We're seeing a shift in mindset as the industry responds to market volatility and more stringent rules and regulations,” said Aftab Jamil, partner and leader of theTechnology and Life Sciences Practice at BDO USA, LLP. “In this environment of uncertainty, companies are reassessing their risk tolerance, cutting down on unnecessary extravagances and buckling down on strategy. This will be a year that the tech industry slows down to speed up."
The report also found that all 100 of the largest U.S. public tech companies cite risks related to cybersecurity in their annual filings, up from just 30 percent in 2009. And, as government regulators step up scrutiny of cyber preparedness, 51 percent of companies specifically cite cyber regulations as a risk factor, reflecting not only the growing cyber threat but potential sanctions for inadequate defense measures.
"The technology industry gets to play the role of hero and villain in the world of cybersecurity. The advances we've seen in machine learning and threat intelligence is rightfully credited to innovation in the tech sector,” said Shahryar Shaghaghi, national leader of BDOTechnology Advisory Services and Head of International BDO Cybersecurity. “At the same time, any cyber incident that occurs is the result of a vulnerability or flaw in technology. While the onus is partly on the user entity to implement the appropriate protocols and policies, the technology manufacturer or service provider does share in the blame?whether or not it's warranted."
The following chart highlights the top 25 risk factors cited by the 100 largest U.S. technology companies:
| 2016 Rank | Risk Factors | 2016 | 2015 | 2014 | 2013 | 2012 |
| #1 | Breaches of technology security, privacy or theft | 100% | 96% | 91% | 81% | 71% |
| #1t | Federal, state or local regulations | 100% | 100% | 98% | 96% | 98% |
| #3 | Competition in the tech industry, pricing pressures | 98% | 100% | 99% | 95% | 99% |
| #3t | Management of current and future M&A and divestitures | 98% | 99% | 94% | 88% | 88% |
| #5 | Threats to international operations and sales | 96% | 96% | 89% | 82% | 85% |
| #6 | U.S. general economic conditions | 95% | 94% | 95% | 92% | 98% |
| #7 | U.S. and foreign supplier/vendor and distribution concerns | 92% | 90% | 93% | 84% | 88% |
| #8 | Ability to attract or retain key personnel | 91% | 95% | 81% | 80% | 82% |
| #9 | Predicting customer demand and interest, innovation | 90% | 90% | 92% | 83% | 91% |
| #9t | Natural disasters, war, conflicts and terrorist attacks | 90% | 86% | 89% | 75% | 88% |
| #11 | Corporate copyright, IP infringement, trademark violations | 89% | 93% | 88% | 79% | 80% |
| #11t | Legal proceedings, litigation | 89% | 93% | 91% | 74% | 83% |
| #13 | Failure to properly execute corporate strategy | 84% | 95% | 91% | 87% | 88% |
| #14 | Accounting, internal controls and compliance standards | 83% | 92% | 79% | 65% | 69% |
| #15 | Failure to develop or market new products or services | 83% | 89% | 84% | 75% | 93% |
| #16 | Ability to maintain or implement operational infrastructure | 81% | 87% | 79% | 71% | 73% |
| #16t | Equipment failure and product liability | 81% | 86% | 82% | 69% | 80% |
| #18 | Indebtedness | 78% | 72% | 74% | 65% | 50% |
| #19 | Cyclical revenue and stock fluctuation | 76% | 69% | 70% | 62% | 76% |
| #20 | Labor concerns | 75% | 64% | 83% | 55% | 56% |
| #21 | Goodwill impairment | 73% | 67% | 57% | 39% | 31% |
| #22 | Inability to acquire capital, credit ratings | 69% | 68% | 74% | 57% | 69% |
| #23 | Loss of a major customer | 61% | 44% | 45% | 25% | N/R |
| #24 | Failure to comply with FCPA, anti-corruption and anti-bribery laws | 58% | 58% | 48% | 29% | N/R |
| #25 | Loss or regulation of government contracts and incentives | 57% | 47% | 35% | 38% | 25% |
*t indicates a tie in the risk factor ranking
**N/R indicates not ranked
Additional findings from the 2016 BDO Technology RiskFactor Report include:
Regulatory Concerns Mount. Concerns related to federal, state or local regulations tied with cybersecurity as the most frequently cited risk factor this year, listed by all 100 companies analyzed. This aligns with the 2016 BDO Technology Outlook Survey, in which tech CFOs ranked policy and tax changes as one of their biggest challenges in 2016. And with the U.S. election cycle in full swing, a new administration also raises questions about the future of government initiatives and spending plans. This year, 57 percent of technology companies cite the loss of government contracts, spending or incentives as a potential risk, up 10 percentage points from 2015.
Competition Intensifies. Nearly all of the largest U.S. technology companies (98 percent) cite risks related to competition in their annual filings. The war for top tech talent continues to heat up as the industry faces an ongoing shortage of skilled tech workers and a tough hiring environment. Ninety-one percent of companies cite attracting and retaining key personnel as a risk factor, ranking as the eighth highest risk overall. Competing to innovate is also a top challenge, with 83 percent citing the risk of failure to effectively develop or market new products or services and 50 percent citing risks related to entering into new markets and product diversification.
International Risks Peak. Among the 100 largest U.S. technology companies in our study, 68 operate in more than 20 countries, and for the first time, we analyzed their unique risks to uncover the growing challenges impacting tech companies with a large, multinational presence. While the top risks (regulations and cybersecurity) are the same across all companies analyzed, threats to international operations and sales jumped to the third most-cited risk for these global companies, compared to the fifth most-cited overall.
Compliance Matters. In the wake of heightened regulatory scrutiny and changing laws, 83 percent of technology companies cite accounting, internal controls and compliance risks in their filings. The Public Company Accounting Oversight Board (PCAOB) has stepped up its scrutiny on internal control procedures and testing, following a significant rise in tax and financial reporting control deficiencies over the last few years. In addition, the Financial Accounting Standards Board (FASB) has announced a number of Accounting Standard Updates that technology companies are in the early stages of implementing.
For more information on the 2016 BDO Technology RiskFactor Report, view the full report here.
About the Technology & Life Sciences Practice at BDO USA, LLP
BDO has been a valued business advisor to technology and life sciences companies for over 100 years. The firm works with a wide variety of technology and life sciences clients, ranging from multinational Fortune 500 corporations to more entrepreneurial businesses, on myriad accounting, tax and other financial issues.
About BDO
BDO is the brand name for BDO USA, LLP, a U.S. professional services firm providing assurance, tax, advisory and consulting services to a wide range of publicly traded and privately held companies. For more than 100 years, BDO has provided quality service through the active involvement of experienced and committed professionals. The firm serves clients through 63 offices and more than 450 independent alliance firm locations nationwide. As an independent Member Firm of BDO International Limited, BDO serves multi-national clients through a global network of 1,408 offices in 154 countries.
BDO USA, LLP, a Delaware limited liability partnership, is the U.S. member of BDO International Limited, a UK company limited by guarantee, and forms part of the international BDO network of independent member firms. BDO is the brand name for the BDO network and for each of the BDO Member Firms. For more information please visit: www.bdo.com.
