With one month to go until new聽data protection laws come into force, UK businesses are being urged to protect themselves against cyber crime after聽new statistics聽show over four in ten (43 per cent) of businesses and two in ten charities (19 per cent) suffered a cyber breach or attack in the past 12 months.
This figure rises to more than two thirds for large businesses, 72 per cent of which identified a breach or attack.
For the average large business the financial cost of all attacks over the past 12 months was 拢9,260 with some attacks costing significantly more.
The most common breaches or attacks were via fraudulent emails – for example, attempting to coax staff into revealing passwords or financial information, or opening dangerous attachments – followed by instances of cyber criminals impersonating the organisation online, then malware and viruses.
鈥淲e are strengthening the UK鈥檚 data protection laws to make them fit for the digital age but these new figures show many organisations need to act now to make sure the personal data they hold is safe and secure,鈥� said Minister for Digital and the Creative Industries, Margot James.
鈥淲e are investing 拢1.9 billion to protect the nation from cyber threats and I would urge organisations to make the most of the free help and guidance available for organisations from the Information Commissioner鈥檚 Office and the National Cyber Security Centre.鈥�
As part of the Government鈥檚 Data Protection Bill, the Information Commissioner鈥檚 Office (ICO) will be given more power to defend consumer interests and issue higher fines to organisations, of up to 拢17 million or 4 per cent of global turnover for the most serious data breaches.
The new Bill requires organisations to have appropriate cyber security measures in place to protect personal data.
The Government is introducing聽new regulations聽to improve cyber security in the UK鈥檚 critical service providers in sectors such as health, energy and transport and has established the world-leading National Cyber Security Centre (NCSC) as part of plans to make the UK one of the safest places in the world to live and do business online.
Ciaran Martin, CEO of the NCSC, said: 鈥淐yber attacks can inflict serious commercial damage and reputational harm, but most campaigns are not highly sophisticated.
鈥淐ompanies can significantly reduce their chances of falling victim by following simple cyber security steps to remove basic weaknesses.
鈥淥ur advice has been set out in an easy-to-understand manner in the NCSC鈥檚 small charities and business guides.鈥�
The new statistics also show that among those experiencing breaches, large firms identify an average of 12 attacks a year and medium-sized firms an average of six attacks a year.
However, the survey shows more businesses are now using the Government-backed, industry-supported Cyber Essentials scheme, a source of expert guidance showing how to protect against cyber threats.
It shows three quarters of businesses (74 per cent) and more than half of all charities (53 per cent) say cyber security is a high priority for their organisation鈥檚 senior management.
Organisations have an important role to play to protect customer data.聽Small businesses聽and聽charities聽are urged to take up tailored advice from the National Cyber Security Centre.
Larger businesses and organisations can follow the聽Ten Steps to Cyber Security聽for a comprehensive approach to managing cyber risks and preventing attacks and data breaches.