Cyber risks – are businesses really ready?
The Hiscox Cyber Readiness report, a review of 3300 organisations, will be a stark warning for CEO’s of SME’s in the UK and in Europe.
The Hiscox Cyber Readiness report, a review of 3300 organisations, will be a stark warning for CEO’s of SME’s in the UK and in Europe.
Whilst prevention of cyber-attacks through security is part of the solution, the fact that the largest increase in targeted attacks, some 59%, was seen in small and medium sized businesses (up to 250 employees) is a concern.
Across the survey the most likely victim of an attack was in the technology, media and telecoms industry, which is where a significant number of start-ups develop their businesses. This sector is where there is reliance on devices and technology, and financial constraints which mean they operate without perhaps underpinning security features seen in the larger more established businesses. Of interest however is the fact that government systems are not immune – with 71% reporting attacks, up from 55% the previous year. Despite the government initiative to replace legacy systems following the Wannacry attack in 2017, the statistic seems to suggest public services and the public purse remain vulnerable and at risk.
The supply chain has rightly been exposed as a weak link – with 65% of respondents experiencing an attack in the past 12 months through their suppliers. How effectively cyber risk is mitigated down the line for example with rights to audit and suitable indemnities in supplier contracts, remains unclear.
One final key factor is the cost to business. In the UK, the average cost of all incidents was up to $243,000 (£186,000). The high incidence of data loss (customer and employee) despite GDPR, IP theft and more sophisticated ransomware and DDoS reflects the sharp 61% increased average cost across all sectors.
So, are businesses ready? With justification GDPR has pushed the issue up the agenda. The reality is with the 'clean up' cost not insignificant, most organisations cannot afford to be without a clear IT strategy and response plan, and effective security, which comes at a price. For good measure, perhaps, one should also look to take out a cyber policy?
Contact
Paul Wainwright
Partner
paul.wainwright@brownejacobson.com
+44 (0)121 237 4577
Related expertise
You may be interested in...
Legal Update
Know your dispute resolution clauses: Key take-aways from Kajima v Children’s Ark and Lancashire Schools v Lendlease
Legal Update
Martyn's Law: A closer look at the UK's new proposed anti-terror measures
Legal Update
A new digital era: Coimisiún na Meán publishes Online Safety Code
In Person Event
Claims Club: Birmingham
In Person Event
Claims Club: London
Legal Update
e-Evidence Package: Increased obligations on service providers to cooperate with data requests from law enforcement authorities
Press Release
Browne Jacobson advises retail giant The Range on its acquisition of Homebase
Opinion
Power for local authorities to conduct compulsory rental auctions of vacant high street properties to come into force next month
Legal Update
Building an inclusive workplace: strategies for attracting and retaining disabled talent
Press Release
Browne Jacobson advises Clean Power Hydrogen on global IP licence agreement
Legal Update
Roundtable report: Community engagement in high street regeneration
Legal Update
Reform of Gambling Regulation in Ireland
Press Release
Browne Jacobson advises IT solutions specialist on sale to Goldman Sachs-backed international digital transformation provider
Legal Update
After a pause, Buy Now Pay Later (BNPL) regulation becomes one step closer
Legal Update
The EU Cyber Resilience Act (CRA)
Published Article - DORA
Digital Operational Resilience Act: Key considerations ahead of the 17 January 2025 compliance deadline
Legal Update
Breaking the glass ceiling: Empowering female leadership in the food and drink sector
In Person Event
Public sector planning club
Legal Update - Public matters newsletter
Public matters: October 2024
Legal Update
IP insights: October 2024
Legal Update
CJEU confirms that copyright law is the same for all claimants
Legal Update
Court of Appeal declares that Panasonic’s refusal to grant an interim licence is not FRAND
Legal Update
EasyGroup proceedings defeated by jurisdictional challenge
Legal Update
New amendments to the Civil Procedure Rules and their impact
Press Release
Browne Jacobson sponsors public sector think tank on new report
Legal Update
Insurability by design: Increased transparency for vehicle manufacturers and insurers
Legal Update
Supreme Court clarifies public authority liability: Police duty of care in negligence cases
Legal Update - Employment Rights Bill
Labour’s employment law reforms: Employment Rights Bill unveiled
Legal Update
Working together to support student wellbeing
Press Release
Browne Jacobson to provide legal services to public bodies across UK after appointment on inaugural YPO framework
Legal Update
Organisational approaches to ESG and sustainability matters
Legal Update
Romance fraud, online scams and cyber fraud: How banks are now protecting your money
Legal Update
Balancing acts: Navigating the complex risks in adult social care provision
Legal Update - Procurement Act
What suppliers to the Welsh public sector need to know about the Procurement Act 2023
Press Release
Browne Jacobson and CBI roundtable explores how to finance public infrastructure post-PFI
Legal Update
Attendance management checklist for schools
Training
Register your interest to join our next Home Delivery Academy
Legal Update
Is Companies House turning the tide against facilitators of fraud?
Legal Update - Procurement Act
Modification of contracts existing before the go-live date of the Procurement Act 2023
