Cybersecurity breaches are clearly growing, according to a spate of recent headlines. However, a new survey reveals that despite the growing threat, many employees believe their companies are somehow immune to the growing threat.
An April survey of UK businesses by IT services provider Probrand revealed that 43% of UK businesses reported some sort of security breach in the last 12 months. The ‘headline’ finding, meant to capture the attention of media and potential customers, is that this figure exceeds the UK average of 36.4% days with precipitation. However, the more concerning finding may be regarding preparedness; according to the Probrand survey of 1,050 UK employees, 44% of businesses are not adequately securing their servers to protect customer and employee data.
Survey results also indicate that most employees are naïve about the amount of exposure they face. Nearly 37% of respondents indicate they do not have sensitive information stored on their company’s servers, when in fact, experience indicates that nearly all employees do have sensitive data – both company and personal – on the network.
Technology and culture
The findings make clear that the solution to preventing cyber-theft lies in both technology and human/cultural measures. On the technology side, data must be secured from end to end, including where stored, in transit, and on mobile devices. At the network borders, secure firewalls must be in place to keep malicious actors at bay.
On the human side, to be blunt, employees must be trained not to do stupid things that needlessly expose personal and company data. Probrand advocates building a ‘trust nothing’ culture and goes so far as to suggest imposing fines against employees who violate company security policies.
Still, for all of the measures that can be taken, it is clear that malicious actors are always evolving and becoming more sophisticated. As a result, enterprises must realise that, regardless of the measures being taken, cyber attacks will still occur. Therefore, the most important thing a company should do is to develop measures to mitigate damage from attacks, including building robust disaster recovery and business continuity plans.
How well do you really know your competitors?
Access the most comprehensive Company Profiles on the market, powered by GlobalData. Save hours of research. Gain competitive edge.
Thank you!
Your download email will arrive shortly
Not ready to buy yet? Download a free sample
We are confident about the unique quality of our Company Profiles. However, we want you to make the most beneficial decision for your business, so we offer a free sample that you can download by submitting the below form
By GlobalDataIn other words, when it comes to cybersecurity breaches, technology is only part of the solution. Building – and enforcing – a set of robust corporate policies that can prevent employees from needlessly exposing sensitive data, and to mitigate damage when breaches do happen, must be a part of any company’s cybersecurity strategy.
