External cyberattacks are costing businesses in the United States about US$3.5 million in incurred annual costs, with 79% of polled businesses lacking comprehensive strategies to manage these risks, according to a new Ponemon Institute study sponsored by BrandProtect. Despite acute awareness of the millions of dollars in annual costs, and the business risks posed by external internet threats, security leaders highlight the lack of staff expertise and technology as a key reason that these attacks are unchecked, the report suggests.