Taking no action in the event of a cyber incident is still a common response

Share of UK businesses that have done any of the following since their most disruptive breach of the past 12 months

Technical

People

Governance

Changed or updated firewall or system configuration

14%

Updated passwords

11%

Additional staff training or communications

10%

Installed, changed or updated antivirus or

anti-malware software

10%

Outsourced cybersecurity

10%

New or updated cybersecurity policies

6%

Additional security on email accounts

5%

Increased monitoring

5%

Changed online banking or payment policies

5%

Other new software or tools

3%

Additional website security

3%

No action taken

13%

Technical

People

Governance

Changed or updated firewall or system configuration

14%

Updated passwords

11%

Additional staff training or communications

10%

Installed, changed or updated antivirus or anti-malware software

10%

Outsourced cybersecurity

10%

New or updated cybersecurity policies

6%

Additional security on email accounts

5%

Increased monitoring

5%

Changed online banking or payment policies

5%

Other new software or tools

3%

Additional website security

3%

No action taken

13%

Technical

People

Governance

Changed or updated firewall or system configuration

14%

Updated passwords

11%

Additional staff training or communications

10%

Installed, changed or updated antivirus or anti-malware software

10%

Outsourced cybersecurity

10%

New or updated cybersecurity policies

6%

Additional security on email accounts

5%

Increased monitoring

5%

Changed online banking or payment policies

5%

Other new software or tools

3%

Additional website security

3%

No action taken

13%

Technical

People

Governance

Changed or updated firewall or system configuration

14%

Updated passwords

11%

Additional staff training or communications

10%

Installed, changed or updated antivirus or anti-malware software

10%

Outsourced cybersecurity

10%

New or updated cybersecurity policies

6%

Additional security on email accounts

5%

Increased monitoring

5%

Changed online banking or payment policies

5%

Other new software or tools

3%

Additional website security

3%

No action taken

13%