UK Firms Disrespecting Cyber Security, Says New Study

With today being Computer Security Day, it’s interesting to note that a recent study, which surveyed 500 IT seniors at large enterprises, showed that 74% do not believe that their firm is doing what is necessary to ensure data protection and cyber security, with 81% saying that more resources and time would help to address the risks.

IT managers on average said that over 30 per cent of their working time is engaged with low-level software and hardware problems, such as repairing printing equipment, troubleshooting, and document recovery, which means that not enough time is being invested in more complex issues, including data security.

Such low-level tasks, when assigned to senior IT managers, cost firms over £4.2bn per year, which Office Depot said would be invested in core risks in better-managed businesses.

Office Depot’s Rob Jones said:

“Empowering senior IT staff to address the complex challenges posed by cyber security threats and legislation surrounding data protection must be a priority for businesses.

“Delegating and outsourcing low-level tasks such as management of a firm’s printing function or hardware maintenance is essential to free up time for skilled IT staff to address these risks.”

Jones said that there are numerous advantages to intelligent procurement and outsourcing.

He added:

“Time is money, and technology specialists should be encouraged to complete higher-value tasks.

“For business leaders, the financial benefits of outsourcing and the potentially catastrophic consequences of a cyber attack or data breach must act as a call to action to devote greater resource to information security.”

He went on to say that as cyber security is a such an important issue, IT professionals have had no choice but to address it, which means that their role has essentially expanded. He believes that an investment in a cyber security team personnel, as well as an infrastructure, will pay off long-term.

Jones said that in addition to the financial benefits of improved resource management, taking low-level risks out of the hands of senior IT managers will likely add to job satisfaction, as well as improve staff retention.

For many firms, outsourcing has become an integral part of resolving a shortage in cyber security skills. However, most governments acknowledge that the emphasis should be on addressing the gap, in the long-term.

The government in the UK is spending money on various schemes to improve skills in cyber security under its National Cyber Security Strategy, which has received praise from a number of private sector schemes.

Jones made a key point when he talked about a need for businesses to build cyber security teams. That can only happen if those businesses wake up to the threat of cyber crime and create cyber security jobs so that they are prepared enough to deal with a breach should one arise. It will cost them far less in the long run than to have their senior IT managers constantly be forced to deal with such issues, or even worse, fall foul to a data breach that they are insufficiently equipped to deal with.