EU Crackdown On Cyber Crime

Cyber-risks facing businesses today are significant and only increasing. With many welcoming the European Union’s recent announcement that cyber criminals will face tough sanctions under a new regime agreed by member states. 

In April 2019, cyber security firm Malwarebytes reported that the number of cyber threats to businesses has increased 235 per cent over 2018-19. Insurance firm Hiscox recently reported that more than 60% of British businesses have been the victim of one or more cyber-attacks in 2019 already.

Good News
Under the measures, people and organisations could be given travel bans and have their assets frozen if they are found to be responsible for cyber-attacks or to have provided financial, technical or other assistance in connection with a cyber-attack. Significantly, sanctions may also be imposed on people or organisations associated with them.

Limited Protection
There is no doubt the EU’s recent announcement marks a step forward in the battle against cyber-crime. The measures provide potentially powerful sanctions against cyber-criminals. However, it is important not to overplay the impact of these measures. Whilst the new EU sanctions will provide some potentially helpful tools for fighting security at an international level, their benefit is unlikely to be felt equally by all organisations.

The new EU measures only apply to cyber-attacks which have a ‘significant effect’. Guidance is yet to be released on the types of attacks that will fall into this category. However, it is possible that an isolated attack against an SME may not be included.

It is more likely that the new regime of measures is aimed at countering attacks on organisations and infrastructure on a national and international scale. 

One cannot help thinking of the worldwide WannaCry ransomware attack which took a particularly heavy blow to NHS hospitals in England and Wales back in May 2017. Further, in March 2019, the ten Healthcare Minister Jeremy Hunt warned of the growing vulnerability of democratic elections to interference. It is against these sorts of public targets that these sanctions are likely to be focused.

Even then, there are inherent difficulties associated with law enforcement of cybercrime. Locating and identifying perpetrators, with hackers regularly employing secure software to remain anonymous by hiding their location and routing their communications through multiple countries in order to evade direct detection.

Easy Target
Whilst the introduction of international sanctions against those involved in cyber-crime is a positive step, their direct impact on most businesses is likely to be limited. It is therefore important that businesses do not first look to government and international organisations for cyber-protection but rather develop robust cyber security strategies of their own.The number of cyber-attacks against businesses is increasing at an alarming rate. But what maybe more surprising for SMEs is that size offers no protection to cyber-attacks. Whilst we may be more familiar with stories of large attacks against well-known organisations, it is often SMEs that are most vulnerable to a breach.

Size does not make data any less valuable to criminals.

Sensitive information such as customer bank details or staff log-ins are desirable to criminals whether you are an small or medium sized enterprise (SME) SME or a public company (PLC). In light of robust regulation such as GDPR, their legal obligations in relation to the protection of that data may be the same. In fact, SMEs can be particularly attractive to hackers precisely because of their size.

Smaller businesses often do not have in place the mechanisms necessary to resist an attack. Therefore, attackers see them as easy targets.

In April, the government published the results of its latest annual cyber security survey. Whilst the survey encouragingly reported an increase in the proportion of SMEs who see cyber security as high priority (74%), there is still cause for concern. 
Smaller businesses are less likely to seek information, advice or guidance about cyber security compared to larger businesses.

Only a quarter of small business have cyber security policies in place and even less have received any cyber security training.

Urgent Action
Organisations of all sizes need to implement measures to effectively manage growing cyber-security risks. These are likely to include ongoing assessment of current security capability and implementation of appropriate upgrades, training to minimise human error and the taking out cyber-liability insurance to cover the costs of when things go wrong.

Cyber security is now a key business risk and it is not going to go away. This is reflected in the EU’s recent measures. The sooner SMEs are alive to these risks, the better.

SME Web:

You Might Also Read:

Hackers Don't Only Target Big Business:

UK Cyber Crime Is Increasing In 2019:

 

 

« US Power Grid Attack – No Harm Done. This Time
Smart Cities Call For Mobile Solutions »

Perimeter 81

Directory of Suppliers

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Clayden Law

Clayden Law

Clayden Law are experts in information technology, data privacy and cybersecurity law.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Free Access: Cyber Security Supplier Directory listing 5,000+ specialist service providers.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

IBM Security

IBM Security

IBM Security delivers an integrated system of analytics, real-time defenses and proven experts, so you can make strategic decisions about how to safeguard your business.

BCS, The chartered Institute for IT

BCS, The chartered Institute for IT

BCS provides IT professionals with up to date and relevant certifications enabling them to manage IT security effectively within their budget.

IDC

IDC

IDC is the premier global provider of market intelligence, advisory services, and events for the IT, telecommunications, and consumer technology markets

Mako Group

Mako Group

The Mako Group specializes in protection - providing security through auditing, testing, and assessments. And, we do it all with the highest quality standards possible.

CloudSigma

CloudSigma

CloudSigma, a pure-cloud IaaS provider offers flexible and innovative cloud hosting solutions for companies of all sizes both in Europe and the US.

Experian

Experian

Experian provide software solutions to help organizations prevent identity fraud and crime.

Sandvine

Sandvine

Sandvine’s network policy control solutions add intelligence to fixed, mobile, and converged communications service provider networks.

Learn How To Become

Learn How To Become

At LearnHowToBecome.org, our mission is to help any job-seeker understand what it takes to build and develop a career. We cover many specialist areas including cybersecurity.

Encore Media Group

Encore Media Group

Encore Media Group provide an international enterprise technology event series exploring IoT, Blockchain AI, Big Data, 5G, Cyber Security and Cloud.

Injazat

Injazat

Injazat Data Systems is an industry recognized market leader in the Gulf region for Information Technology, Data Center and Managed Services.