#Cybersecurity #United Kingdom #Reading #Commvault #UK Businesses

UK Businesses Face Significant Cybersecurity Challenges

Recent research conducted by Commvault, a renowned provider of cyber resilience solutions, has unveiled alarming figures concerning the cybersecurity landscape for UK businesses. In collaboration with GigaOm, this study highlights that UK organizations are subjected to a staggering number of critical cyber incidents, more than any other country worldwide.

The Alarming Statistics

According to the survey, a striking 93% of UK businesses have reported experiencing a "business-critical" cyber incident. This figure is significantly higher than the global average, where only 86% of companies reported such incidents. Of these incidents, 57% occurred within the last year and a half, indicating that UK organizations are under constant threat from cyberattacks, be it security breaches or ransomware attacks.

Surprisingly, despite the heightened exposure, UK companies lag in their readiness to manage and recover from these cyber incidents. The research indicates that UK firms are 21% less likely to possess a dedicated environment for recovery purposes compared to their international counterparts. Furthermore, they are 11% less likely to have tested their recovery plans in the last month than companies from other nations. These two elements are critical components of a robust recovery strategy and their absence puts organizations at increased risk.

Barriers to Recovery

The concept of a Minimum Viability Company (MVC), essential for resuming core business operations post-cyber incident, poses certain challenges in the UK. The survey reveals several obstacles hindering businesses from achieving this level of operational resilience. The most significant barrier noted by 52% of respondents was the complexity of existing systems and applications. Keeping recovery plans aligned with evolving business needs was cited by 47% of participants as another challenge.

Additionally, a considerable proportion (30%) of businesses expressed difficulty in distinguishing between essential operations and less critical functions. This reflects a broader struggle faced by many organizations in managing their digital infrastructures effectively.

Despite these challenges, the research indicates a positive trend among UK businesses in their efforts to bolster cyber resilience. Nearly 65% reported having an inventory of critical systems, while 61% have established clear incident response processes. These figures surpass the global averages of 50% and 41%, respectively, suggesting UK businesses are progressively investing in measures to prepare for potential cyber incidents.

The Need for Board-Level Attention

Richard Gadd, Senior Vice President at Commvault, emphasized the urgency for UK organizations to revise their strategies concerning cyber resilience. With cyber threats becoming increasingly sophisticated, the implementation of a tested recovery plan and having a dedicated recovery environment are pivotal. Gadd stated that these preparations can mean the difference between chaotic recovery efforts and seamless business continuity.

Howard Holton, COO at GigaOm, reinforces this sentiment, pointing out that the current landscape of cyberattacks has rendered them a commonplace event rather than exceptions. He encourages executive leaders to take charge and prioritize recovery preparations at a business level, ensuring that their organizations can withstand potential attacks effectively.

Conclusion

The findings from this research paint a critical picture of the cybersecurity situation facing UK businesses. While organizations are making progress in preparing for cyber incidents, significant gaps in their readiness remain. As the threat landscape continues to evolve, it is imperative for businesses to re-evaluate their resilience strategies and ensure that they implement robust recovery plans and environments to mitigate the impacts of cyber incidents effectively.