About a-team Marketing Services
The knowledge platform for the financial technology industry
The knowledge platform for the financial technology industry

A-Team Insight Blogs

Is Information or Cyber Security finally becoming a strategic board level issue?

Subscribe to our newsletter

By Steve Daniels, Strategic Business Advisor – Cyber Security, CGI

It’s my opinion that cyber security has for too long been seen by business leaders as a tactical activity left to a breed of specialists. Certainly, CGI research entitled ‘Cyber security in the boardroom: UK plc at risk’ found that 28% of respondents said this had been the case until recently.  This seems comparable to other important areas of business enabling activity such as data protection, consent management and data management which have typically received low levels of management attention.

Fortunately, it seems that there is growing evidence of board level executives waking up to the threat to their business cyber security poses. Some 38% of those surveyed believe they will experience a cyber security breach in the next 12 months. This is perhaps prompted by high profile cyber security breaches reported in the media and their organisations’ dependence on IT services.

With the direct costs of such data breaches estimated at over £1m a year by survey respondents and the new stiffer penalties for breaches on Board members under the finance sector’s Senior Managers Regime and imminent General Data Protection Regulation (GDPR) and Network Information Security Directive (NISD), the stakes are high. The breaches reported publicly and these new requirements have led to an 81% increase in cyber security awareness amongst those that CGI surveyed.

Whilst Boards are now recognising the problem, the business response still seems to be lagging behind. Spend is increasing by 11% on average and 15% in retail and financial services but that is against a low base of an average of 9% of total IT spend. It could be seen that this response still seems tactical rather than actively governed as defined in standard BS13500, and concerted and programmatic to build in the organisational resilience as defined in standard BS65000.

At the heart of an organisation are its data assets, which GDPR and NISD seek to protect through what will be a step change in cyber security maturity. This may absorb all of the increased cyber security spend being promised, and more. It’s surely time for all the data and cyber security specialists to come together both to advise their Boards, to execute the Board’s direction effectively and underpin the Board’s accountability for this critical concern.

Just how far is your organisation along this path and should it be satisfied with where it is?

Find out more about the connection between cyber and data governance which will be moderated by Angela Wilbraham at the next EDMworks Practitioner Network at Kings Cross on 2nd June. Click here to for further information and to register.

Subscribe to our newsletter

Related content

WEBINAR

Recorded Webinar: Managing Off-Channel Communications Compliance

Managing off-channel communications – business interactions occurring outside of approved corporate systems – continues to challenge firms’ compliance efforts. The rise of personal messaging apps, social media, and other unmonitored channels – for example, messaging functionality embedded in an order management system – exposes firms to substantial regulatory risk. Enforcement actions by regulatory bodies, such...

BLOG

Navigating Divergent AI Regulation – Can Standards Bring Clarity?

Artificial intelligence is transforming financial services, from automating credit assessments to streamlining compliance processes. But while AI capabilities are developing at pace, regulatory frameworks are struggling to keep up. Nowhere is this more apparent than in the contrasting approaches taken by the European Union and the United Kingdom. The EU has opted for a rules-heavy,...

EVENT

ESG Data & Tech Briefing London

The ESG Data & Tech Briefing will explore challenges around assembling and evaluating ESG data for reporting and the impact of regulatory measures and industry collaboration on transparency and standardisation efforts. Expert speakers will address how the evolving market infrastructure is developing and the role of new technologies and alternative data in improving insight and filling data gaps.

GUIDE

AI in Capital Markets: Practical Insight for a Transforming Industry – Free Handbook

AI is no longer on the horizon – it’s embedded in the infrastructure of modern capital markets. But separating real impact from inflated promises requires a grounded, practical understanding. The AI in Capital Markets Handbook 2025 provides exactly that. Designed for data-driven professionals across the trade life-cycle, compliance, infrastructure, and strategy, this handbook goes beyond...