UK firms still ignoring security basics

UK businesses are risking becoming victim to data breaches by failing to take the most basic of cybersecurity precautions, new research has revealed.

A survey of 1,253 UK workers in full or part-time employment, carried out by technology services provider, Probrand.co.uk, has revealed that investing in new and expensive technology, while not considering the most basic of security steps, is potentially widening companies’ vulnerabilities to cyber-attacks, which cost UK businesses millions annually.

More than 43 percent of the surveyed workers, who all use IT systems in their workplace, said their company has invested in new cybersecurity products and services during the past year – but the data shows employees themselves are risking this being undermined through sloppy security practices.

Worryingly, 67 percent said they have a basic password – such as a single word or simple consecutive numbers – at work. Meaning they could easily be guessed or hacked.

A further 63 percent admit that they do not change their password regularly. And in fact, almost 1 in 2 (46 percent) say they have never changed their password since they began working at their company.

The data also revealed that more than a third of UK workers report to having used unsecured network connections (using public wi-fi or tethering to mobile phones) when working remotely.

Previous Probrand research recently found that 43 percent of UK businesses have suffered a cyber breach or attack in the last 12 months.

Matt Royle, marketing director at, Probrand said: “When workers are failing to take the most basic steps to protect their company’s networks and data, it undermines the money that is being invested and the work that is being put into maintaining cybersecurity on a more sophisticated level.

“Our findings have shown that a shocking number of UK businesses are struggling at the very basics, so we would encourage business leaders to monitor and regulate even the simple cybersecurity practices. Writing protocols into company handbooks and employee contracts are just some ways of doing this. As the data shows, as only 37 percent of employees constantly change their password, it’s clear that some internal training is needed here.”