According to the Government's recently published Cybersecurity Breaches Survey 2016, 65% of UK businesses reported experiencing a data breach in the past year.
The survey also showed that the majority of UK businesses have not implemented cyber security measures such as the Cyber Essentials Scheme that are suggested by the British government. Many organisations were shown to be talking the talk but not following through. 90% of large businesses said that cyber security is of high priority and yet just 29% of companies have cybersecurity policies in place and only 10% of businesses have risk management processes in place.
‘The UK is a world-leading digital economy and this government has made cybersecurity a top priority. Too many firms are losing money, data and consumer confidence with the vast number of cyber-attacks. It’s absolutely crucial businesses are secure and can protect data. As minimum companies should take action by adopting the Cyber Essentials scheme which will help them protect themselves,’ said Minister for the digital economy Ed Vaizey.
Supply Chain & Cyber Essentials
Other findings of the survey were that just 13% of all UK companies, and 34% of large UK businesses, set minimum cybersecurity standards for their suppliers. These figures are concerning as the supply chain is one of the most effective angles of attack used by cyber criminals. Larger businesses are also more likely to take steps to improve cybersecurity than smaller ones suggesting that many SMEs either believe that they are too small to be a target of cyber criminals or think that implementing effective security measures is too expensive.
A good way for SMEs to ensure that they take the matter of cybersecurity seriously is to obtain the Cyber Essentials accreditation. By doing so they will improve their reputation as a well-defended supply chain partner and will be seen as a safer partner for larger organisations to work with.