The Five Key Principles Of The New NCSC Cyber Governance Code Of Practice

As we have seen in recent weeks, serious cyber attacks can have long-lasting effects on operations, trading and reputation. Significant financial cost and internal resource is tied to ensuing investigation, recovery, regulatory response and legal implications. Cyber criminals exploit weaknesses in systems, irrespective of an organisation's size or sector.

Recent UK statistics¹ published by the Department for Science, Innovation and Technology (DSIT) reveal that whilst cyber security remains a key focus for the majority of businesses (72%), board level responsibility for cyber security has steadily declined among businesses over the last four years. Just under 3 in 10 businesses had board members taking explicit responsibility for cyber security as part of their job. (In large businesses, the outcome was better: 66% had a board member responsible for cyber security.)