Marsh's Cyber Risk Survey Report found that nearly 70% (69.4%) of respondents from large and medium-sized corporations across the UK do not assess the suppliers and/or customers they trade with for cyber risk. Furthermore, more than half of respondents (51.4%) stated that their organisation has not been asked to demonstrate a competent standard of their IT security practices to their bank and/or customers, in order to do business with them.
Stephen Wares, Marsh’s Cyber Risk Practice Leader, Europe, the Middle East and Africa (EMEA), commented:
“If organisations are to reduce the threats arising from cyber attacks, more work needs to be done to consider cyber security as a business issue, as opposed to a technical problem. This is especially true for larger organisations, which attract highly motivated and sophisticated hackers that might identify smaller business partners that are typically less well protected as the ‘back-door’ into their IT systems.”
Additionally, Marsh’s survey results reveal that board-level ownership of cyber risk remains comparatively low: IT departments continue to take primary responsibility for cyber risk in the majority (55.5%) of organisations, while the board takes primary responsibility for cyber risks in less than one fifth (19.4%) of the organisations surveyed.
Marsh also found that while the majority (52.8%) of firms surveyed have or are seeking to buy cyber insurance in the next 12 months, only 11% currently have policies in place.
“Cyber risk management should be at the heart of the strategic decision-making process. Only with board-level support can companies take the big strides needed to advance their knowledge and perform the financial modelling required, to judge the value of the risk transfer options available on the market,” said Stephen Wares.
Marsh’s findings are based on research among risk managers and chief financial officers from more than 100 large and medium sized UK firms, including financial services, manufacturing, retail, healthcare and energy/utility companies.
Marsh’s latest research follows the publication of a report in March by HM Government and Marsh, UK Cyber Security: The Role of Insurance in Managing and Mitigating the Risk, which unveiled a series of initiatives between government and the insurance industry to help firms manage cyber risk more effectively.
To download Marsh's Cyber Risk Survey Report please click below
|
