75% UK businesses hit by cyber incidents in 2023

TLDR:

• 75% of UK businesses and 79% of charities experienced a cybersecurity incident in the past year
• Board involvement in cybersecurity and use of technical controls are key factors in boosting resilience

Three-quarters of UK businesses and 79% of charities experienced a cybersecurity incident in the past 12 months, according to a UK government survey. The Cyber Security Longitudinal Survey (CSLS) found that organizations showed limited improvements in their cybersecurity posture between 2022 and 2023. Key findings include:

– Charities tended to have a less formalized approach to cybersecurity compared to businesses, with differences in VPN usage and device access policies.

– A majority of businesses and charities have incident response procedures in place, but a smaller proportion have tested these policies.

– Boardroom involvement in cybersecurity, including oversight and training, is highlighted as crucial for enhancing resilience.

The report also emphasized the need for organizations to prioritize cyber resilience in the face of increased threats from hostile nation states. With only 13% of UK organizations reported as resilient to cyber attacks, there is a clear call to action for businesses and charities to strengthen their defenses and elevate cybersecurity as a key focus in boardroom discussions.