Most financial companies have experienced a cyber security incident in the past year, according to a survey of the UK’s financial sector for a data security company.
The survey of senior business decision makers within enterprise financial firms in the UK, found that almost half of the incidents reported over the past 12 months originated from employees failing to follow security protocol or data protection policies. This threat was biggest in mid-sized financial companies (3,000-4,999 employees) with 52pc of respondents citing employee failure to follow corporate data protection policies as their biggest issue. Also it was found that further causes of cyber security incidents within the financial sector included the introduction of malware and viruses via third party devices, including USBs and BYOD (32pc), file and image downloads (25pc) and employees sharing data with unintended recipients (24pc).
Dr Guy Bunker, CTO, Clearswift, pictured, said: “The financial sector is the lynchpin of the UK’s economy and a vital part of our nation’s Critical National Infrastructure, so it is alarming to see such high numbers of security incidents within financial organisations. Unfortunately, in this day and age it’s a case of ‘when’ not ‘if’ a firm is breached so the financial sector needs to shift gears and speed up the innovation and deployment of effective data protection and threat mitigation strategies.”
The numbers associated with security incidents are in contrast the firm adds with further findings from the survey which revealed less than a quarter (23pc) of respondents had an adequate level of budget allocated to cyber security within the firm. Most, 73pc of respondents would like to see some, if not significant, increase in their organisation’s cyber security spending.
Bunker added: “Whether it’s an inadvertent mistake, a malicious insider, or an external threat actor that causes a security incident, the ramifications of data loss are extremely serious for any organisation. For those organisations who hold citizen data and their financial information, there is a need for extra vigilance to protect that data no matter where it is stored, how it’s processed or what digital collaboration channels it flows through. Understanding the latest threats and the potential consequences from next generation attacks will help drive the business case for investment in new technology to mitigate the risks.
“Cyber security needs to rapidly evolve and the budgeting process should take this into account – the threat which can bring down a company may not have existed three months ago. Financial organisations need to be able to respond immediately in order to protect their reputation. While many areas of securing a company’s data can be improved by educating employees and developing clear policies and processes, technology plays a key role in mitigating today’s biggest threats through automating and enforcing security protocols – which requires investment. With the competition only a mouse click away for those with poor security, great information security is a positive business differentiator and driver of growth.”
The research was by technology research firm, Vanson Bourne, on behalf of Clearswift; 100 senior business decision makers from UK financial organisations were polled to map the attitudes of businesses and employees relating to cyber security.
