Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Seventy-Two Percent Of U.K. Organisations Attribute Damaging Cyberattacks to Vulnerabilities in Technology Put in Place During the Pandemic

September 22, 2021

London, U.K.

Tenable®, Inc., the Cyber Exposure company, has published results of a study that found 72% of U.K. organisations attribute recent business-impacting* cyberattacks to vulnerabilities in technology put in place during the pandemic, while 68% suffered attacks that targeted remote workers. The data is drawn from ‘Beyond Boundaries: The Future of Cybersecurity in the New World of Work,’ a commissioned study of more than 1,300 security leaders, business executives and remote employees, including 168 respondents in the U.K., conducted by Forrester Consulting on behalf of Tenable. 

Over a year after work-from-home mandates went into effect, many organisations are planning their long-term hybrid and remote work models. In fact, 70% of U.K. organisations now support remote employees, compared to 31% prior to the pandemic, while 86% plan to permanently adopt a remote working policy or have already done so. But embracing this new world of work has opened organisations to new and unmanaged cyber risk. 

Enabling a workforce without boundaries: Only 48% of U.K. organisations are adequately prepared to support hybrid working models from a security standpoint. The result is that 78% of security and business leaders believe their organisation is more exposed to risk as a result of remote work.

Cloud adoption accelerated for critical systems: As part of changes made in response to the pandemic, 46% of organisations moved business-critical functions to the cloud, including accounting and finance (42%) and human resources (33%). When asked if this exposed the organisation to increased cyber risk, 80% of security leaders believed it did.

Attackers are taking advantage: 90% of organisations experienced a business-impacting cyberattack* in the last 12 months, with 51% falling victim to three or more.

“Remote and hybrid work strategies are here to stay and so will the risks they introduce unless organizations get a handle on what their new attack surface looks like,” said Amit Yoran, CEO, Tenable. “This study reveals two paths forward — one riddled with unmanaged risk and unrelenting cyberattacks and another that accelerates business productivity and operations in a secure way. CISOs and CEOs have the opportunity and responsibility to securely harness the power of technology and manage cyber risk for the new world of work.”

Hybrid work models and a digital-first economy have brought cybersecurity front and center as a critical investment that can make or break short- and long-term business strategies. To address this demand, 75% of U.K. security leaders plan to increase their network security investments over the next 12 to 24 months; 73% will increase spend on cloud security; 66% plan to spend more on vulnerability management.

“The rapid adoption of technology to support a hybrid working model and moving business-critical functions to the cloud were a necessity driven by circumstance,” said David Cummins, VP of EMEA, Tenable. “The reality has seen the corporate attack surface explode, with many organisations still struggling to understand and address the risks introduced. Managing the plethora of technologies is now necessary to ensure enterprises aren’t left vulnerable and susceptible to cyberattacks.”

Further results from the study, including how organisations can manage risk in the new world of work, are available.

Note to Editors:

  • Forrester Consulting conducted an online survey of 44 security leaders, 43 business executives, and 81 remote workers (i.e., full-time employees working three or more days from home) in the U.K.. These are a subset of a wider study of 426 security leaders, 422 business executives, and 479 remote workers as well as six telephonic interviews with business and security executives, to explore shifts in cybersecurity strategies at large enterprises made in response to the pandemic. The study was fielded in Australia, Brazil, France, Germany, India, Japan, Mexico, Saudi Arabia, the U.K. and the U.S. in April 2021.

*“Business-impacting” relates to a cyberattack or compromise that results in one or more of the following outcomes: a loss of customer, employee, or other confidential data; interruption of day-to-day operations; ransomware payout; financial loss or theft; and/or theft of intellectual property.

About Tenable

Tenable®, Inc. is the Cyber Exposure company. Over 30,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus®, Tenable extended its expertise in vulnerabilities to deliver the world’s first platform to see and secure any digital asset on any computing platform. Tenable customers include more than 50 percent of the Fortune 500, more than 30 percent of the Global 2000 and large government agencies. Learn more at www.tenable.com.

Contact Information:

Dulcie McLerie
Tenable
[email protected]
+44 (0)7389 195 378

Stay up to date!

Subscribe to our email alerts for new press releases.

Subscribe for press release updates

Try for Free Buy Now
Tenable.io FREE FOR 30 DAYS

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Sign up now.

Tenable.io BUY

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

65 assets

Choose Your Subscription Option:

Buy Now
Try for Free Buy Now

Try Nessus Professional Free

FREE FOR 7 DAYS

Nessus® is the most comprehensive vulnerability scanner on the market today. Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.

Buy Nessus Professional

Nessus® is the most comprehensive vulnerability scanner on the market today. Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.

Buy a multi-year license and save. Add Advanced Support for access to phone, community and chat support 24 hours a day, 365 days a year. Full details here.

Try for Free Buy Now

Try Tenable.io Web Application Scanning

FREE FOR 30 DAYS

Enjoy full access to our latest web application scanning offering designed for modern applications as part of the Tenable.io platform. Safely scan your entire online portfolio for vulnerabilities with a high degree of accuracy without heavy manual effort or disruption to critical web applications. Sign up now.

Buy Tenable.io Web Application Scanning

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

5 FQDNs

$3,578

Buy Now

Try for Free Contact Sales

Try Tenable.io Container Security

FREE FOR 30 DAYS

Enjoy full access to the only container security offering integrated into a vulnerability management platform. Monitor container images for vulnerabilities, malware and policy violations. Integrate with continuous integration and continuous deployment (CI/CD) systems to support DevOps practices, strengthen security and support enterprise policy compliance.

Buy Tenable.io Container Security

Tenable.io Container Security seamlessly and securely enables DevOps processes by providing visibility into the security of container images – including vulnerabilities, malware and policy violations – through integration with the build process.

Try for Free Contact Sales

Try Tenable Lumin

FREE FOR 30 DAYS

Visualize and explore your Cyber Exposure, track risk reduction over time and benchmark against your peers with Tenable Lumin.

Buy Tenable Lumin

Contact a Sales Representative to see how Lumin can help you gain insight across your entire organization and manage cyber risk.