53%
of New Zealand businesses experienced a cyber threat between January and June 2025
Source: NCSC Cyber Threat Report 2025
Last reviewed: 2026-03-14
Sources
Public references behind the figures used on this site
This page lists the current public sources behind major numeric and policy claims used across Good Security. It is here so the homepage can stay focused on the business problem while the underlying references remain easy to inspect.
Cyber risk in New Zealand
Public references behind the cyber-risk figures used across the site.
$1.6B
estimated annual losses to New Zealanders from online threats in 2024
Source: NCSC research on online threats, May 2025
Last reviewed: 2026-03-14
Privacy and accountability
Public references for privacy complaints, damages, and current standards timing.
21%
increase in privacy complaints reported by the OPC in 2024/25
Source: Office of the Privacy Commissioner Annual Report 2025
Last reviewed: 2026-03-14
$350K
maximum damages the Human Rights Review Tribunal can award for a privacy case
Source: OPC guidance on the Human Rights Review Tribunal
Last reviewed: 2026-03-14
30 Oct 2025
Minimum Cyber Security Standards publication date
The standards are intended for GCISO-mandated agencies; non-mandated agencies can adopt them voluntarily.
Source: NCSC Minimum Cyber Security Standards
Last reviewed: 2026-03-14
Procurement and pricing
References used for government-supplier and pricing context.
$51.5B
approximate annual New Zealand government procurement spend
Source: New Zealand Government Procurement
Last reviewed: 2026-03-14
1 Dec 2025
5th edition Government Procurement Rules effective date
Source: New edition of Government Procurement Rules goes live
Last reviewed: 2026-03-14
$1,750/mo
starting monthly programme price at Good Security
Source: Good Security pricing
Last reviewed: 2026-03-14
Insurance and breach cost
Public references for cyber insurance requirements and breach cost data.
$173K
average breach cost for New Zealand businesses
Estimated figure from NCSC research; widely cited in NZ industry.
Source: NCSC — Businesses in Aotearoa need to prioritise cyber security
Last reviewed: 2026-03-14
87%
of ANZ insurers require email security controls for cyber insurance eligibility
Australia and New Zealand combined; exceeds global average of 66%.
Source: Arctic Wolf 2025 Cyber Insurance Report (via Insurance Business NZ)
Last reviewed: 2026-03-14
84%
of ANZ insurers require identity management evidence for cyber insurance eligibility
Australia and New Zealand combined; exceeds global average of 53%.
Source: Arctic Wolf 2025 Cyber Insurance Report (via Insurance Business NZ)
Last reviewed: 2026-03-14
225%
cyber insurance premium increase for Waikato DHB after the 2021 ransomware attack
Premiums increased from $0.4M to $1.3M. Broader market conditions also contributed.
Source: Reseller News NZ — Waikato DHB handover document
Last reviewed: 2026-03-14
82%
of cyber insurance claims involved organisations without multi-factor authentication
Global figure, not NZ-specific.
Source: Coalition 2024 Cyber Threat Index
Last reviewed: 2026-03-14
Business impact
Public references for business disruption and enforcement trends.
42%
of New Zealand businesses that received a ransom demand paid it
Source: Kordia 2026 NZ Business Cyber Security Report
Last reviewed: 2026-03-14
61%
of New Zealand businesses suffered serious business disruption from a cyber incident
Source: Kordia 2026 NZ Business Cyber Security Report
Last reviewed: 2026-03-14
75%
of New Zealanders surveyed want harsher penalties for privacy breaches
Approximately 'three quarters' — rounded from OPC survey results.
Source: Office of the Privacy Commissioner 2025 survey
Last reviewed: 2026-03-14
Need help turning these pressures into a practical programme?
If the questions are already landing, the next step is deciding what matters first and what evidence the business needs ready.