UK businesses are still not up to par on cyber security, and GDPR is looming.
Awareness and readiness to defend against cyber threats again proves a major problem as a study has found 64% of security professionals are not confident that their organisations could successfully defend against a mobile cyber-attack.
The problem is all the more worrying as 20% admit to having been hit by a breach via mobile devices, but an additional 24% had no idea at all as to whether they had been breached or not. This oblivious state is conducive to the vast periods of time that breaches are being left unnoticed, leaving adversaries to roam free within an organisation’s network.
This report was produced by Check Point and Dimensional Research, and it is entitled The Growing Threat of Mobile Device Security Breaches. The results of the study were compiled based on the survey feedback of 410 security professionals globally.
The title of the report is apt, with 94% of security professionals expecting a rapid increase in the frequency of attacks on mobile devices; this poses the question of why more is not being done despite the vast majority predicting the growth of the threat.
David Gehringer, principal of Dimensional Research said: “The research consistently revealed that the overall focus and preparedness of security for mobile devices is severely lacking.”
Mr Gehringer said: “Security professionals identified the risk of mobile devices, but focus and resources assignment seem to be waiting for actual catastrophes to validate the need to properly prepare their defenses. It’s unfortunate that so many companies have not learned from the past and are doomed to repeat wasted costs and the customer outrage of being breached.”
These examples of shocking security weakness within business are akin to other results of recent studies on the preparedness of companies facing cyber threats. In a recent IoD report supported by Barclays, it was found that only 57% of UK businesses have a formal plan for cyber security strategy set out and ready.
The threat landscape appears to be the most dangerous it has ever been, with security providers everywhere unable to guarantee safety to well protected organisations, it is clear that awareness must be extremely low. With GDPR and its potentially crippling punishments for a lack of solid security measures, organisations must get up to speed on the double.