62% of UK Firms Lack Full Cyber Security Insurance - Despite a Rise in Overall Coverage

Fico research reveals that telecommunications firms lag behind other industries regarding cyber security insurance, with 17% reporting they have no coverage.
This was revealed in a survey based on numerous interviews with senior staff in the security and IT functions of companies with more than 500 employees in the UK and ten other countries. It found that only 38% of UK firms surveyed have cyber security insurance that covers all risks. While most respondents said that their cyber insurance is not based on an accurate assessment of their firm’s individual risk.
The study, which Ovum conducted for FICO, also found that the number of UK firms with cyber security insurance has risen in the past year – just 10% of UK executives surveyed say their firm has no cyber security insurance, compared to 24% in all 11 countries surveyed.
Telecommunications firms lag behind other industries regarding cyber security insurance, with 17% reporting they have no coverage, compared to just 5% of financial service firms.
Steve Hadaway, FICO general manager for Europe, the Middle East and Africa, said: “Cyber security insurance has become a must-have for UK firms in a short period of time.”
“But with that growth will come increased pressure on insurers to increase the transparency and fairness around how premiums are set. Businesses will demand that their investments in cyber security protection — and the strength of their cyber security posture — drive their premiums down.”
Taking into the growing impact of global cyber-related incidents, arguably it makes complete sense that the industry has also expanded. Lloyd’s of London warned in a report last year that economic losses from a single “cloud service disruption scenario” could reach as much as $121 billion.
With this mind, the pressure is mounting on chief technology officer’s to step up to the plate and protect British businesses from damaging cyber attacks, these are the words of Advanced’s CTO, Jon Wrennall, who in a recent whitepaper commented that “Undoubtedly the role of CTO is on the ascent. Every position on the board can, and should, be a driving force for the business. However, given the impact that digital disruption is having on every single industry, the connected CTO is, I believe, best placed in our digital world to truly drive the associated benefits”.
“However, it therefore also falls to the CTO to both manage and overcome the connected threats as well. Indeed, CTOs are fundamentally not doing their job if they don’t achieve this.”
Maxine Holt, research director at Ovum, said: “Although UK organisations perform well in terms of the uptake of cyber insurance, the fact that fewer than 40% have comprehensive insurance demonstrates there is still some way to go for these firms to have a broad view of their security posture and how to present it for insurance.”
“It could also show that these companies have a current security posture that insurers are not prepared to cover comprehensively. We should not detract from the positive news here; 90% of UK organisations have elevated the importance of cyber security to a level that requires insuring, even if only partially.”
Source: information-age

Latest Jobs
-
- Infrastructure (Network / Security) Engineer | West London commutable | Permanent
- London
- Apply today
-
Infrastructure (Network / Security) Engineer | West London commutable | Permanent This is an in house opportunity. Looking for someone that has on prem / data center experience MUST be a currently hands on config, Install, upgrade, troubleshooting experience Routing, Switching, Network Security (firewall, IDS etc), Microsoft Active Directory / 365. VMWare Scripting / automation experience wanted. Python, Powershell etc Must be commutable to West London twice a week. Visa sponsorship not available. Apply today for more information Book a call via this link https://calendly.com/d/crqf-t28-7tb
-
- Identity & Access Management Architect
- Edinburgh
- Upto £95000 plus bonus and benefits
-
Location: Edinburgh | Hybrid Working | Permanent Are you an experienced Identity & Access Management professional with a passion for designing and implementing cutting-edge security solutions? We are looking for a Lead Architect, where you’ll play a key role in helping clients enhance their IAM capabilities, protect critical data, and navigate complex security challenges. About the Role As a Lead Architect, you will be responsible for shaping and delivering IAM strategies, designing robust security solutions, and driving long-term digital transformation. You’ll leverage your expertise to provide strategic guidance on areas such as: Identity Governance & Administration (IGA) Privileged Access Management (PAM) Access Management (AM) Entitlement Management Directories & Authentication Solutions You will have the opportunity to work with innovative technologies and frameworks, ensuring that businesses can securely manage access to critical assets while enabling growth. What You’ll Be Doing Providing subject matter expertise in IAM and leading transformation projects for clients Developing IAM roadmaps, operating models, and governance frameworks Driving innovation by integrating IAM capabilities into wider digital transformation strategies Building and maintaining strong relationships with clients and stakeholders Designing and implementing scalable IAM solutions to meet business needs What We’re Looking For Proven experience in IAM strategy, solution architecture, or assurance Strong leadership skills with experience guiding technical teams Ability to work in a client-facing role, delivering clear communication and insights A technology-focused, innovative mindset with strong business acumen Willingness to work from our Edinburgh office 2-3 days per week
-
- Security Architect - Cloud - Consultancy London
- London
- N/A
-
Security Architect with a focus into Cloud (AWS, Azure or Google Cloud Platform) needed. You must have client facing consultancy experience. This mean you must have experience working with clients helping them to meet their security design needs. That could include working with existing internal teams to understand, review and mitigate / uplift existing Cloud Security designs, or perhaps helping clients set out / understand their current needs and deliver their cloud security strategy. (Or anything in between) Technical knowledge is of course essential but working with clients to understand and solve their Cloud Security design challenges is vital. You must obviously have a current history working as a cloud security architect. You will need to be commutable to London. Whilst a hybrid role the expectation is 3 days a week in the office / meeting clients. International relocation or Visa sponsorship isn’t available for this role. Apply on this page and arrange a call here https://calendly.com/d/crpz-m7j-wyx