New research shows high profile GDPR fines impact UK cybersecurity spend
New research by data security company Clearswift has shown that the recent large GDPR fines against enterprise giants in the UK have had a ripple effect on board-level involvement and spending plans in relation to cyber security within UK financial firms.
The research, which surveyed senior business decision-makers within enterprise financial organisations in the UK, highlighted the Information Commission Officer’s (ICO) recent judgements, £183M proposed fine for BA and £99M proposed fine for Marriott, as a key turning point in addressing their own cyber security.
Almost one-third of companies (32%) referenced recent GDPR fines against British Airways and Marriott International as being the primary reason for an increase in board level involvement and/or provision for IT security spending.
“It has been over a year since GDPR has been enforced and organisations were wondering if there were any teeth behind the regulations,” said Dr Guy Bunker, CTO at Clearswift.
“These fines have clearly sent shockwaves into the industry and are now serving as a blueprint for how the ICO will handle cases of this nature. The board is now sitting up and taking notice of GDPR compliance and the role cyber security plays in it. However, it is not just about taking notice, it is the need to invest to maximise their ability to keep the organisation safe from new threats. Revisiting their ‘defence in depth’ strategy to augment with enhanced security solutions including both the boundary and the cloud, and implementing more stringent policies is critical to securing the critical information they hold within the organisation.”
Other key threats identified by respondents included supply chain threats (25%), where attackers seek to damage an organisation by targeting less-secure elements in the supply network. Ransomware attacks (24%), such as the infamous WannaCry attack in 2017, where malicious software denies access to a computer system or critical data until a ransom is paid were also high up the list.
Interestingly, when looking solely at companies with over 5,000 employees, fear of Ransomware was perceived to be the key reason why firms are bolstering their spending. This isn’t surprising when you consider firms infected with ransomware have, in some cases, ended up reverting to pen and paper while the outbreak was dealt with.
When asked about spending levels, the majority of financial businesses would like to see an increase in cyber security investment (73%) with almost one in five (17%) UK firms surveyed reporting that their budgets currently stood ‘well below the adequate level’. Fortunately, this figure dropped dramatically (to 5%) when looking at firms with over 5,000 employees, a possible sign that larger firms have already made an additional investment to deal with the ever-changing cyber threatscape.
Bunker also said: “Increasing investment in the latest data loss prevention solutions will help mitigate inadvertent and malicious data loss risks. Furthermore, with GDPR, organisations need to be aware that receiving unauthorised data can also cause issues.”
Industry: Cyber Security
- Identity & Access Management (IdAM) Consultant
- Upto €100,000 plus bonus and benefits
An Identity & Access Management Consultant is needed to lead and drive technical and or business transformation projects in a client-facing position for a prestigious consultancy in Germany. The Identity & Access Management Consultant will be responsible for technical design and implementation of Identity & Access Management/IAM products within a wide variety of clients. The Identity & Access Management Consultant will have a blend of technical hands-on and client-facing consultancy with the ability to develop new business. Broad technical knowledge across Identity and access management is benefical. The Identity & Access Management Consultant will need to have technical hands-on experience with one or more of the following core areas; Privileged Access Management (PAM, CyberArk, Beyondtrust, Thycotic) Identity Governance Administration (IGA, Sailpoint, Omada, RSA) Customer Identity & Access Management (CIAM, Forgerock PSD2) The Identity & Access Management Consultant must have the willingness to travel to customer sites across Germany (once we are allowed to)
- Cyber Vulnerability and Threat Hunter, London
REF CH7915 Cyber Vulnerability and Threat Hunter, London £50,000 London To monitor and identify cyber threats and vulnerability within a public sector environment. MIRE Att&ck, CIS, OWASP, Vulnerability management tools MUST be able to commute to central London MUST be able to achieve UK SC Clearance. On going support and development. Apply today for more information or contact me directly on Chris.Holt@dclsearch.com or 07884666351
- Ping Identity Consultant
- upto €850
Looking for experienced PIng Identity Consultants, Looking for consultant with Implemenation or Architect experience in the Ping identity product set (Ping Federate, Ping Access, Ping Directory, Ping Adapter development, SDK etc) This would be for implementation projects, working across Europe. You will be responsible for providing implementation services to our clients from information gathering through to implementation. Evaluating client business, process, systems, and technology requirements and advise clients on best practices to help guide and solidify proposed designs. Manage Client expectations, Stakeholder Managment, ensuring design match business requirements this is a remote role you can be based anywher in Europe
- Ping Identity Consultant
Looking for experienced PIng Identity Consultants, Looking for consultant with Implemenation or Architect experience in the Ping identity product set (Ping Federate, Ping Access, Ping Directory, Ping Adapter development, SDK etc) This would be for implementation projects, working across Europe. You will be responsible for providing implementation services to our clients from information gathering through to implementation. Evaluating client business, process, systems, and technology requirements and advise clients on best practices to help guide and solidify proposed designs. Manage Client expectations, Stakeholder Managment, ensuring design match business requirements this is a remote role, you can be based anywhere within Europe