GCA’s newest report claims organizations could save as much as $200 billion with DNS protection.

Curtis Franklin, Jr., of Dark Reading wrote a piece about GCA’s newest report, The Economic Value of DNS Security. In the article, Franklin mentioned that DNS firewalls could save U.S. organizations between $19 billion and $37 billion in losses. Additionally, DNS protection could save $150 billion to $200 billion in losses globally.

Moreover, there’s no need to believe this protection is unattainable. Phil Reitinger, GCA’s President & CEO, states that DNS security is available at no cost and ensures that it is also easy to configure.

To read Franklin’s full article about GCA’s report, The Economic Value of DNS Security, please click here.

GCA Press Release

More than $10 Billion in Data Breach Losses Over Past Five Years from the Studied Incidents Might Have Been Prevented, and $150 To $200 Billion in Global Losses from Cybercrime

NEW YORK, June 12, 2019 — New research from the Global Cyber Alliance (GCA) has found that Domain Name System (DNS) firewalls, also known as protective DNS, which are freely available and easy to install, could prevent 33% of cybersecurity data breaches from occurring.

Through a simple tweak, DNS firewalls leverage threat intelligence from cybersecurity companies and/or public sources to automatically prevent users from visiting known malicious sites. Most often consumers visit a malicious site when they click on a malicious link or mistype a legitimate web address.  Malicious software on a computer or phone can also cause a visit to a malicious site.

According to Verizon’s long-running and industry-leading Data Breach Investigations Report, there were more than 11,000 confirmed data breaches collected and analyzed over the past five years. Independent researchers Shostack & Associates and Cyentia Institute working with GCA were able to determine that 3,668 of those breaches would have been potentially thwarted if users had a DNS firewall deployed.

“The constant stream of breaches has unfortunately caused many small businesses and consumers to simply accept cyber-attacks – that no matter what they do they cannot protect themselves,” said Philip Reitinger, President and CEO of the Global Cyber Alliance. “However, there are many easy-to-implement steps that can prevent businesses and consumers from being another notch in the belt of a hacker. Our research shows that protective DNS services are among the most valuable.”

According to the study, DNS firewalls might have prevented $10 billion in data breach losses over from the 11,000 incidents in the past five years. And the actual figure may be more – the researchers were unable to measure every case where a DNS firewall could have protected the victim, and their estimate of the financial impact is probably biased low.

Finally, as DNS firewalls might affect one-third of cyber incidents, and with current estimates of the scope of cybercrime, DNS firewalls might play a role in stopping $150 to $200 billion in losses every year.

DNS is the “phone directory” of the Internet as it translates human readable names like globalcyberalliance.org into computer addresses – a string of numbers otherwise known as an IP address. In order to access websites on the Internet, your computer must leverage a DNS service that is usually configured by your Internet Service Provider or your network administrator.

“I’ve always been a big fan of DNS-based controls, and I’m glad to see GCA doing something like this. There are relatively few security measures that address so many threats for so little cost and effort. I’ve configured all my home devices to use Quad9, and I suggest you give it a look as well,” Wade Baker, Ph.D., Partner, Cyentia Institute.

The Global Cyber Alliance, in collaboration with IBM and the Packet Clearing House, developed and launched Quad9, a free DNS security service that blocks known malicious domains, preventing computers and Internet of Things devices from connecting to malware or phishing sites.

A fully detailed report that highlights the GCA methodology and research findings can be found in the following report:  The Economic Value of DNS Security.


About the Global Cyber Alliance

The Global Cyber Alliance (GCA) is an international, cross-sector effort dedicated to eradicating cyber risk and improving our connected world. We achieve our mission by uniting global communities, implementing concrete solutions, and measuring the effect. GCA, a 501(c)3, was founded in September 2015 by the Manhattan District Attorney’s Office, the City of London Police and the Center for Internet Security. Learn more at www.globalcyberalliance.org.



“I’ve been able to make the same prediction about cyber security ever since I started in it in 1995. Back then, I could have sat before you and said, ‘next year, things will be worse.’ That is true every year until now.”

IACD Automate recently hosted Integrated Cyber May 2019 where GCA’s President and CEO, Phil Reitinger, was a keynote speaker. He opened up his session with the quote above, and he believes cyber security will continue to worsen because our strategy is not working. “We do not have an approach that addresses the challenges of the internet,” he tells the audience.

Reitinger believes there are two interrelated problems that are causing these cyber difficulties: scale and complexity.

Watch the full keynote below to see all that our CEO has to say on cyber security, scale and complexity.


OTA badge

After comprehensive audit, the Global Cyber Alliance’s website honored for consumer protection, security and privacy

April 17, 2019 – New York, NY – The Global Cyber Alliance announced that it has been named to the Internet Society’s latest Online Trust Alliance (OTA) Audit and Honor Roll. The Audit and Honor Roll is the de facto standard for recognizing website excellence in consumer protection, security, and responsible privacy practices for the world’s top companies.

“The Global Cyber Alliance (GCA) is pleased to once again be included on the OTA’s Honor Roll. Shining a light on privacy and security practices encourages us to take stock of where we are and what we can do better,” said Shehzad Mirza, Global Cyber Alliance Director of Operations. “At GCA, security and privacy are foremost to our mission. We take seriously our own practices and want others to do the same so we build more trust and confidence in our digital world.”

Over the past three years GCA has been an ardent champion of DMARC, an email authentication protocol, encouraging global adoption and delivering resources to make implementation easier. GCA was also the organization behind the development of the secure DNS service Quad9 (in collaboration with IBM and Packet Clearing House), now an independent organization. Earlier this year GCA launched the GCA Cybersecurity Toolkit for Small Business, an online collection of free tools geared towards small and medium-sized businesses to give them operational tools and guidance to shore up their cyber defenses. Learn more at www.GlobalCyberAlliance.org.

As the only comprehensive, independent online trust benchmark study, the OTA Online Trust Audit evaluates websites in three main categories: domain, brand and consumer protection; site, server and infrastructure security; and privacy, transparency and disclosures. Based on a composite weighted analysis, sites that scored 80 percent or better overall, without failing in any one category, received the honor roll designation (read the entire methodology here).

“In this age where many companies are accused of putting profits ahead of customers, the websites that made the Honor Roll should be commended for their commitment to online trust,” said Jeff Wilbur, Technical Director of the Online Trust Alliance initiative at the Internet Society. “This designation shows that you can be one of the world’s most successful businesses without sacrificing consumer privacy, protection, and security.”

OTA audited more than 1,200 of the top consumer-facing websites spanning banking, consumer services, U.S. government, healthcare, news and media, retail, Internet Service Providers, mobile carriers, email providers, and web hosters. It found that 70 percent of analyzed websites qualified for the honor roll. The Federal government category surged to the front with 91 percent of sites placing on the honor roll. Healthcare, a new sector this year that includes pharmacies, testing labs, insurance companies, and hospital chains, had the lowest overall honor roll placement at 57 percent. More details about the 2018 OTA Online Trust Audit and Honor Roll is at https://otalliance.org/2018HonorRoll.

About the Global Cyber Alliance

The Global Cyber Alliance (GCA) is an international, cross-sector effort dedicated to eradicating cyber risk and improving our connected world. We achieve our mission by uniting global communities, implementing concrete solutions, and measuring the effect. GCA, a 501(c)3, was founded in September 2015 by the Manhattan District Attorney’s Office, the City of London Police and the Center for Internet Security. Learn more at www.globalcyberalliance.org.

About OTA

The Internet Society’s Online Trust Alliance (OTA) identifies and promotes security and privacy best practices that build consumer confidence in the Internet. Leading public and private organizations, vendors, researchers, and policymakers contribute to and follow OTA’s guidance to help make online transactions safer and better protect users’ data. The Internet Society is a global nonprofit dedicated to ensuring an open, globally connected, trustworthy, and secure Internet for everyone.


GCA Press Release

GCA obtains more than $1.5M in additional funds from other sources to support its efforts to eradicate cyber risks

NEW YORK, April 9, 2019 – The Global Cyber Alliance announced a $1.068 million gift from Craig Newmark Philanthropies to help provide critical cybersecurity protections for the media and journalists, and for elections offices and community organizations as they prepare for the 2020 U.S. presidential election.

“To thrive, American democracy needs a safe, trustworthy press and a secure election process,” said Craig Newmark, founder of craigslist and Craig Newmark Philanthropies. “I’m proud to support the Global Cyber Alliance as they help bolster two of the most critical tenets of democracy.”

The gift will go toward developing cybersecurity toolkits that:

  • Protect journalists and media outlets from cyber-attacks that are designed to either manipulate public opinion or expose sources
  • Enable election boards or other bodies to leverage the latest in cybersecurity protections to preserve election integrity and help ensure that all votes are accurately recorded and counted
  • Secure nonprofit community organizations that work to uphold the right to vote

The Global Cyber Alliance toolkits will provide concrete and effective means for these groups to better secure themselves against malicious actors who aim to attack the organizations and people that facilitate our democratic process.

Included in the toolkits, and made available at no cost, will be operational tools, clear guidance, and recommendations, all designed to significantly reduce cyber risk and shore-up defenses. The toolkits will follow the Center for Internet Security’s (CIS) top Critical Controls, a leading global standard for cybersecurity guidelines.

“Protecting the integrity of the free press and our election processes from increasing cybersecurity threats is critical to an open society,” said John Gilligan, President and CEO of the Center for Internet Security. “CIS is proud to contribute to this effort with the Global Cyber Alliance by providing a framework and validated controls that enable improved protections for all.”

In February, the Global Cyber Alliance – in partnership with Mastercard – launched the Cybersecurity Toolkit for Small Business, a free resource that offers operational tools to help small business owners and operators protect themselves, their customers, and their partners from cyber threats. Since its launch, the toolkit has been positively received and is gaining significant attention. This same approach will be extended to provide tailored assistance to the media, election offices, and community organizations.

In addition to the funding from Craig Newmark Philanthropies, the Global Cyber Alliance has received more than $1.5 million in funding from other donors. These contributions will support the organization’s key projects, including its toolkits.

“We thank Craig Newmark Philanthropies and all of our funders for enabling the Global Cyber Alliance to continue to deliver on its mission to make the Internet safer, providing real solutions and ways to foster trustworthy media and free and fair elections,” said Philip Reitinger, President and CEO of the Global Cyber Alliance. “The additional funding from Craig Newmark Philanthropies and others will enable us to tackle and eradicate even more cyber risks.”

Since 2015, the Global Cyber Alliance has maintained a clear focus on building communities and delivering concrete and measurable solutions to online risks. The organization has developed tools and services and has pushed for policy changes that have enabled more than 7,300 companies and government agencies to deploy the Domain-based Message Authentication & Conformance (DMARC) e-mail protocol, which prevents e-mail spoofing and phishing. In 2017, its work contributed to the decision of the U.S. Department of Homeland Security to issue a binding directive that requires U.S. government agency email domains to deploy DMARC.

Additionally, in collaboration with IBM and Packet Clearing House (PCH), the Global Cyber Alliance led the development of Quad9, a free domain name protection service that prevents consumers from accessing known malicious websites, such as phishing sites and those compromised with malware. Quad9 operates across six continents, blocks at least 10 million malicious events per day, and is seeing its queries grow weekly by 5 percent in the U.S. and 10 percent across Europe.

About the Global Cyber Alliance

The Global Cyber Alliance (GCA) is an international, cross-sector effort dedicated to eradicating cyber risk and improving our connected world. We achieve our mission by uniting global communities, implementing concrete solutions, and measuring the effect.  Learn more at www.globalcyberalliance.org.

About Craig Newmark Philanthropies

Craig Newmark Philanthropies was created by craigslist founder Craig Newmark to support and connect people and drive broad civic engagement. The organization works to advance people and grassroots organizations that are getting stuff done in areas that include trustworthy journalism, voter protection, gender diversity in technology, and veterans and military families. For more information, please visit: CraigNewmarkPhilanthropies.org.


Aimée Larsen Kirkpatrick, alkirkpatrick@globalcyberalliance.org, 808.282.9850

Adam Benson, adam@vrge.us, 202.999.9104

Carner Round, CRound@WeberShandwick.com, 347.260.1957