Call us now:
A survey report by the UK government on the status of cybersecurity of UK industry, as part of its continual oversight of the status of cybersecurity risk management. Statistics of cybersecurity compliance always make for an interesting read as they can be read in so many ways.
One has to be careful when one takes weighted samples and extrapolates these to represent the whole of the UK public and private sector. There are significant differences between what is presented in the report and what has been researched by industry. As an example figures such as the average cost of cyber incidents, adherence to cybersecurity standards, board expertise, training, ransomware policy, companies effected by cyber incidents and board governance figures do not align with either UK governments own reports (cyber essentials take up) or other industry surveys (Heidrick and Struggles board survey, IBM costs of cyber incident), the recent parliamentary report on cybersecurity.
One is concerned that those that are not cyber literate could take these and get an impression of UK cybersecurity that may not align with that presented by other nation states, or other government statistics. When one considers the steps that they have taken to address cyber, there are differences that need explaining further. With a general reticence for the public and private sector to adopt cybersecurity risk management; the reality that cyber is a national security problem; companies not reporting cyber incidents and the lack of cyber resources. Cybersecurity risk management reporting requires balance to engage decision makers to adopt cybersecurity. Alternatively follow other nations and regulate cyber.
@Thaddeus Dziekanowski Brian D. McCarthy Rich Waite, M.Ed. George Sawyer
Veritas GRC
#cybersecurity #cyberriskmanagement #cyberregulation #3lod #cyberattack
#ransomware #cyberreporting
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7176488902113800192