The rising urgency of Cybersecurity: why this should be a top priority for organisations

We live in an increasingly interconnected world of both citizens and public infrastructures with a growing associated risk of cyber-attacks. Robust protection is no longer just an option. Today, cyber-risk is one of the major concerns sitting at the top of the international agenda of any government, as hacker’s attacks or security breaches have the potential to jeopardize the global economy.

The proliferation of cyber-attacks unleashes severe damage to companies, governments and individuals worldwide. Consequently, organisations are prompted to quickly adopt cybersecurity countermeasures.

In most cases, businesses are far from prepared enough to face a cyber-attack. A recent study shows how two thirds of UK’s firms had received no proper training to deal with this possibility. Cyber professionals pointed out both internal and external issues that could seriously hamper their ability to safeguard their organisations. The vast majority surveyed (54%) report they do not have sufficient tools to face such a threat. 55% of the interviews were unable to react with sufficient promptness to limit the fallouts of an incident and 79% reported that their companies can’t get access to vital insights enabling them to prioritize their reaction to an attack. Ultimately, just one out of five seems to be confident with how their company is able to cope with a security breach.

The consequences of cyber crime 

Cyber-crime can be easily split into two different categories: data security breaches and sabotage. The first is mainly aimed at obtaining valuable personal data, intellectual property or information closely related to prices, bids or mergers. The latter regards conventional attempts to tear systems and infrastructure apart.

Commercial losses are not the only damages that an organization faces following a cyber-attack. It may also face multiple dangers such as:

• Breach of contractual obligations

• Regulatory actions

• Negligence claims

• Brand damages

In this respect, it has to be noted that most violations end up unreported. This is hardly surprising, given the ensuing loss of credibility and the probable risk of legal action being brought against those that admit to being subject of cyber-crime.

Cyber risk and legal aspects

Governments are prompting organisations to take more responsibility for cybersecurity and privacy crimes. In this context, the EU is implementing the GDPR (General Data Protection Regulation) with the aim of harmonizing current legislation on data protection. The new framework will oblige organisations to report any data breach both to authorities and the individuals affected. Failure to comply with the new regulations could potentially lead to fines of up to 5% of the global turnover of the organization involved.

Cyber security issues are definitely on the rise. Computer networks have always been a main target for criminals and it’s likely that the number of cyber breaches will rise over the long term, as these networks grow bigger. Nevertheless, there are some effective precautions that organisations can put into practice to protect themselves.

The key-role of

The role of is to contribute in making the Online & Digital Market a safer place, by promoting the uptake of innovative cybersecurity and privacy services from R&I activities all over Europe. Here SMEs will have full access to a marketplace with an updated catalogue of services to further improve their safety in this respect.


A Holistic framework: Business Process Re-engineering and functional toolkit for GDPR compliance

BPR4GDPR is one of the GDPR cluster projects that will provide a holistic framework able to support end-to-end GDPR-compliant intra- and interorganisational ICT-enabled processes at various scales, while also being generic enough, fulfilling operational requirements covering diverse application domains. Read this to find out more.

Future Events

IAM Online Europe live webinar - AARC Extensions to the REFEDS Assurance Framework

AARC is holding a live webinar on 27 June 2019 at 15:00 CEST, that will explain extensions to the REFEDS Assurance Framework and implementations that were devised in the AARC project.

Representation of the State of Hessen to the EU
04/07/2019 to 05/07/2019

Project CyberSec4Europe (Cyber Security for Europe) is holding it next event - "Representation of the State of Hessen to the EU" in Brussels, Belgium on 4-5 July 2019. 

Other three pilots are invited during CyberSec4Europe meetings.