12 April 2019
The Cyber Security Breaches Survey is an annual report by The Department for Digital, Culture, Media and Sport (DCMS). It reports on how businesses and charities are responding to the cybersecurity threats they face.
Results from the DCMS Survey
This recent survey suggests that the message is getting through and many charities are taking action to protect themselves.
Charity trustees and senior managers demonstrated a dramatic shift, with an overall 22 point increase in awareness of cybersecurity over 2018’s results.
Strong increases in awareness are seen across small, medium and large charities, with cybersecurity now being seen as a high priority in more than two-thirds of all charities. As expected, awareness is generally strongest in the larger charities, but it is encouraging to see such positive results, even for smaller charities.
We know that cybersecurity breaches can be costly and disruptive for charities, and this year’s report backs that up. The average cost of all breaches or attacks identified in the last 12 months by a charity is now £9,470. However, the costs of a breach vary, with some organisations reporting losses of up to £100,000. This amount could be devastating for some charities.
Phishing attacks and prevention
Phishing remains the most common form of attack on charities, with most of those who identified an attack or breach listing fraudulent emails as the cause. Technical measures are important in stopping these attacks but the strongest link remains staff and volunteers, who have a critical role in protecting the organisation. Appropriate policies and training are vital.
Getting help with cyber risks
The Charity Commission continues to raise awareness about the cybercrime threat and provide practical actions that charities of all sizes can take to protect themselves.
Nearly half of charities have also looked for external help with cybersecurity in the last year, which is very positive news, but cyber risks increase all the time.
There are still many charities who are yet to take action and, even for those that have, they still need to keep up to date with advice as the cybercrime threat to charities continues to evolve.
UHY have expertise in this area and, where specialists are required, we can recommend suitable options.
If you would like to discuss this or any aspect of your charity, please contact me or your nearest UHY charity sector expert.
Alternatively, you can read more about the services we provide to charities here.
Useful links
- Cyber Security Breaches Survey 2019
- How to report a phishing email
- Action Fraud website
- Charity Commission guidance: protect your charity from fraud
- NCSC Cyber Security: Small Charity Guide
