The Impact Of Cybercrime On UK Business

Figures published by the government in 2017 revealed that almost half of all UK firms were hit by a cyber breach or attack in the previous year. Business leaders must be fully prepared in the increasingly complicated fight against breaches of data, hacking and phishing scams.

The number of attacks is rising each year, and it has been estimated that online fraud and cybercrime cost the UK over £11bn in 2016. All of which explains why the issue of cyber security is no longer just a priority for the IT department, but also for the boardroom…

The IoD Open House event in March, amongst other topics, shed light on the often confusing world of online security and data protection, with a number of speakers, sessions, and panel discussions.

Here are seven shocking cyber security facts to bear in mind when considering your business presence online:

1. The UK’s 5.4 million small businesses are collectively attacked more than seven million times a year

This costs the UK economy a staggering £5.26bn, according to a survey carried out by the Federation of Small Businesses. Although 93 per cent of small businesses have some kind of cyber security in place, around 66 per cent have been a victim of cyber-crime in the last two years. During that period, those affected have been victims on four occasions on average.

2. One of the biggest threats to data safety can come from BYOD ¬– “bring your own device”

In many cases when staff bring personal devices such as laptops, tablets and smartphones into work, they are not protected by the company’s security network, which presents an opportunity for hackers to directly access company data through these devices. Be particularly vigilant in the period after Christmas when new devices are being used for the first time.

3. ‘Whaling’ has become a boom industry

In 2016, Austrian aerospace parts maker FACC was swindled out of a colossal €42m (£37m) by hackers using a phishing scam known as ‘whaling’. This scam targets a company’s CEO or finance by tricking them into rushing through a large payment for a fake acquisition.

According to a report by the Federal Bureau of Investigation (FBI) in June last year, identified losses from this type of scam came to £3.1bn (£2.4bn) and had risen by 1,300 per cent in 18 months.

4. Over 43 per cent of IoD members don’t know where their company’s data is physically stored

The IoD conducted a Policy Voice Survey in 2016 focusing specifically on cyber security, investigating how fast the pace of technology is changing our members’ attitudes and views on cyber security.

The fact that so many respondents didn’t know where their data is stored is a truly frightening statistic. It effectively means businesses are losing control of their organisation’s data, which may well be the biggest asset of a business.

5. 72 per cent of respondents to the IoD’s Policy Voice survey have received a bogus invoice

This shows the extent of social engineering and how the internet can be used to defraud businesses. Along with false house purchase completion requests for solicitors, this is truly alarming, and is why human interaction with technology needs to be failsafe, and why cyber is becoming a largely human problem.

6. Cyber-crime accounted for almost 30 per cent of all crimes recorded in the UK from July 2016 to July 2017

Figures issued by Office for National Statistics revealed an alarming fact about the extent of online crime in this country. There were also 2.5 million incidents of bank and credit card fraud. It should also be noted that these are only cases reported to the authorities; the real figure is undoubtedly and significantly higher.

7. On average, it takes 120 days for a business to know that its data has been compromised

According to a UK government report published in 2016, 25 of the large firms who detected a cyber security breach or attack in the past year experienced a breach at least once per month.

Institute of Directors

You Might Also Read: 

UK Police Cybercrime Training:

Cybercrime Costs Londoners £26m Every Month:

Cybercrime Costs Over $600 Billion Annually:

« Leaked Emails Expose Russian Exploits In Ukraine
SpaceX Plan For 4k Satellite Broadband Network »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall And Why Does It Matter

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall And Why Does It Matter

See how to use next-generation firewalls (NGFWs) and how they boost your security posture.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

National Institute of Standards & Technology (NIST)

National Institute of Standards & Technology (NIST)

NIST is a measurement standards laboratory, and a non-regulatory agency of the United States Department of Commerce. Areas covered include IT and cybersecurity.

HvS Consulting

HvS Consulting

HvS Consulting is a specialist information security company offering a full range of services including IT security architecture, ISO 27001 audits, Pentesting, Security monitoring and Training.

Shift Technology

Shift Technology

Shift Technology provides insurance companies with an innovative SaaS solution to improve and scale fraud detection.

ShiftLeft

ShiftLeft

ShiftLeft is a continuous application security platform, purpose-built for the modern software development life cycle.

Fischer Identity

Fischer Identity

Fischer Identity provide identity & access management and identity governance administration solutions.

Cloudsine

Cloudsine

Cloudsine (formerly Banff Cyber Technologies) is a cloud technology company specializing in cloud adoption, security and innovation.

Onevinn

Onevinn

Onevinn's goal is to create a transparent, cost-effective security that is noticed as little as possible by the users. We simply call it "intelligent security."

cleverDome

cleverDome

cleverDome has created the first community built and proven model that redefines the standards for protecting the most confidential data and information of consumers in the cloud.

Pacific Cyber Security Operational Network (PaCSON)

Pacific Cyber Security Operational Network (PaCSON)

PaCSON is an operational cyber security network of regional working-level cyber security experts in the Pacific.

Swiss Cyber Forum (SCF)

Swiss Cyber Forum (SCF)

The Swiss Cyber Forum (SCF) builds competences and helps its members to mitigate the cyber risks associated with digitalisation.

Flatt Security

Flatt Security

Flatt Security is a cyber security startup based in Japan providing security assessments and other cyber security services.

Cheops Technology

Cheops Technology

Cheops is a specialist in IT Business Technology Services. We help SMEs and large companies build, optimize and manage their IT so they can focus on their core business.

ProCheckUp

ProCheckUp

ProCheckUp is a London-based independent provider of cyber security services, including IT Security, Assurance, Compliance and Incident Response.

AccountabilIT

AccountabilIT

AccountabilIT is a full spectrum information technology services firm for enterprises with complex information technology needs seeking relief from those challenges.

Protelion

Protelion

The Protelion Security Platform is uniquely architected to deliver security solutions that combine greater protection, flexibility, and performance.

Menaya

Menaya

Menaya provide Ethical Hackers for leading companies while also providing cyber security solutions to help major infrastructures protect against cyber crime.