I rapporten “Cyber Risk Reporting I the UK” oplyses det, at ”87 procent of the FTSE 100 clearly pulled out one or more elements of cyber risk as a principal risk in their disclosures. IT systems failure was identified in the principal risks disclosure by 71 procent of the FTSE 100 and cyber crime or cyber attack was identified by a slightly higher 72 procent. Data protection risk – the risk around sensitive information, in particular compliance with data protection regulations – was identified by 59 procent while data theft or misappropriation of data, including intellectual property (IP) was specifically identified as a risk in only 33% of annual reports – although of course some companies will see this as falling under a broader risk of cyber crime. For one third of the FTSE 100 to call data theft out as a principal risk indicates just how reliant we all are on technology, and how this increases our vulnerability,” hedder det i analysen.
