Newsletter & Blog

It’s an interesting question and one that has been endlessly debated over the years. Is an SME worth the effort of a Cyber attack? It’s difficult to assess just how many Cyber attacks there are annually, aimed at SMEs in the UK. Some studies suggest that they have increased tremendously in recent years. Most large organisations have the capability, but not always the will it has to be said, to determine just how many attacks they sustain, how many were successful and what the loss has been, quantified in financial terms. SMEs do not.

Okay in a conversation I was having last week about the new EU and UK data protection regulations and legislation, someone said to me; “what on earth do they [DPA 2018 & GDPR] mean when they say you have to take a Risk Based Approach to ensuring data protection”?

It’s been interesting looking through the various posts and their generally optimistic view of the current market conditions, not just within the IT and Cyber Security Industries, but generally. It contrasts hugely to what we are seeing in both the on line, TV and printed media. I get that people generally don’t want to appear pessimistic, or to advertise the fact that their business may have been adversely impacted by the pandemic and the subsequent lockdowns, but there has to have been some knock on effect.

As H2 CRAS moves into it's 3rd year of doing business, it has become increasingly obvious that many SMEs are still nervous of devoting any resource or budget to Cyber Security in any meaningful way. An attitude of 'we'll cross that bridge when we come to it', in regards to both Cyber Security and Data Protection, two obviously interwoven subjects, prevails. Of course, when that bridge needs to be crossed, it's generally too late.

ARE SME’S SUFFICIENTLY AWARE OF THE ISSUES SURROUNDING CYBER SECURITY, AND ARE THEY AWARE OF THE REMEDIES THAT THEY CAN AND SHOULD BE TAKEN AND THE SERVICES AVAILABLE TO THEM?