UK businesses are facing a rapidly evolving landscape of cyber risks, with a complex web of interconnected threats posing significant challenges. This is according to a recent report by Marsh, a leading insurance broker, which highlights the growing concern among UK business leaders. The report, based on a survey of 2,000 business leaders, reveals that cyber risk has become the top priority for UK corporates, surpassing economic and financial risks, compliance, legal and regulatory concerns, and people-related issues. This shift in focus is largely attributed to the increasing use of technology and rapid advancements in artificial intelligence (AI), which have created a new set of vulnerabilities and risks. The report's findings underscore the need for businesses to adopt a comprehensive and integrated approach to risk management, moving away from siloed risk programmes towards scenario-based planning and integrated frameworks that combine technical controls, people, and processes. The interconnectivity of risks is a key theme, with incidents in one area, such as people, supply chain, or compliance, potentially triggering cyber incidents and cascading into financial, regulatory, and reputational consequences. This interconnectedness demands a fresh perspective on company resilience plans, as business leaders navigate a fluctuating macroeconomic environment. The report's author, Alistair Brighton, emphasizes the importance of this shift, stating that businesses are now recognizing the need to address the complex web of risks they face. He highlights the role of technology and tools in building streamlined, adaptable risk management capabilities, enabling businesses to plan for the worst and ensure they can weather future incidents. The growing awareness of cyber risks is also attributed to the rise of new technologies like AI, which bring both new risks and enhanced defensive capabilities. Kelly Butler, head of the UK cyber practice at Marsh, underscores the critical nature of cyber risks, emphasizing that they cannot be ignored. She notes that cyber threats have the potential to cascade through businesses and their supply chains, impacting brands, increasing regulatory scrutiny, and causing immeasurable losses. Butler advocates for a proactive approach to building resilience, suggesting that businesses should focus on hardening the fundamentals of their cyber risk programmes, treating supply risk as an enterprise-wide concern, and integrating cyber considerations into board-level decision-making. The report's findings also highlight the increasing use of cyber insurance and the growing demand for specialist advisory support to help businesses navigate the complex data landscape and develop effective insurance strategies. Marsh's research underscores the need for businesses to take a comprehensive and proactive approach to risk management, recognizing the interconnected nature of risks and the importance of building resilience before the event. As the business landscape continues to evolve, the report serves as a timely reminder of the critical role that technology and risk management play in ensuring the long-term success and sustainability of UK businesses.
