Cyber security needs more boardroom-level attention

A new study from consulting company KPMG ranks data protection and cyber security as third in priorities for UK boardrooms.

The ‘Business Instincts Survey’ spoke to close to 500 UK C-level executives and discovered that  many companies are aware of the fact that they are failing to invest sufficiently in IT security.

In spite of this, 36% of those who responded said that people skills retain the number one status in terms of priorities, and machinery/plant sits at number two, with 19%. Cyber Security ranked in third place.

Martin Tyler from the cyber security arm of KPMG said that although they hear daily news on cyber attacks, the result is that UK boardrooms assume the view that much of it is fear-mongering.

He said:

“I see a real risk of boardrooms doubting the severity of the issue and the extent of their vulnerability. Instead, by better understanding the cyber threat landscape and ensuring cyber security is weaved into everything else that is done, it’s much easier to positively manage the risk rather than reacting when things go wrong.”

The survey may have increased boardroom awareness of the dangers of being unprepared to deal with cyber attacks but that awareness will ultimately need to result in action. If they don’t have someone on the payroll who knows how what to do in such a situation, they are leaving themselves open to severe potential damage. Now is the time for boardrooms to rank IT security recruitment just a little bit higher on the company agenda.