EU Crackdown On Cyber Crime

Cyber-risks facing businesses today are significant and only increasing. With many welcoming the European Union’s recent announcement that cyber criminals will face tough sanctions under a new regime agreed by member states. 

In April 2019, cyber security firm Malwarebytes reported that the number of cyber threats to businesses has increased 235 per cent over 2018-19. Insurance firm Hiscox recently reported that more than 60% of British businesses have been the victim of one or more cyber-attacks in 2019 already.

Good News
Under the measures, people and organisations could be given travel bans and have their assets frozen if they are found to be responsible for cyber-attacks or to have provided financial, technical or other assistance in connection with a cyber-attack. Significantly, sanctions may also be imposed on people or organisations associated with them.

Limited Protection
There is no doubt the EU’s recent announcement marks a step forward in the battle against cyber-crime. The measures provide potentially powerful sanctions against cyber-criminals. However, it is important not to overplay the impact of these measures. Whilst the new EU sanctions will provide some potentially helpful tools for fighting security at an international level, their benefit is unlikely to be felt equally by all organisations.

The new EU measures only apply to cyber-attacks which have a ‘significant effect’. Guidance is yet to be released on the types of attacks that will fall into this category. However, it is possible that an isolated attack against an SME may not be included.

It is more likely that the new regime of measures is aimed at countering attacks on organisations and infrastructure on a national and international scale. 

One cannot help thinking of the worldwide WannaCry ransomware attack which took a particularly heavy blow to NHS hospitals in England and Wales back in May 2017. Further, in March 2019, the ten Healthcare Minister Jeremy Hunt warned of the growing vulnerability of democratic elections to interference. It is against these sorts of public targets that these sanctions are likely to be focused.

Even then, there are inherent difficulties associated with law enforcement of cybercrime. Locating and identifying perpetrators, with hackers regularly employing secure software to remain anonymous by hiding their location and routing their communications through multiple countries in order to evade direct detection.

Easy Target
Whilst the introduction of international sanctions against those involved in cyber-crime is a positive step, their direct impact on most businesses is likely to be limited. It is therefore important that businesses do not first look to government and international organisations for cyber-protection but rather develop robust cyber security strategies of their own.The number of cyber-attacks against businesses is increasing at an alarming rate. But what maybe more surprising for SMEs is that size offers no protection to cyber-attacks. Whilst we may be more familiar with stories of large attacks against well-known organisations, it is often SMEs that are most vulnerable to a breach.

Size does not make data any less valuable to criminals.

Sensitive information such as customer bank details or staff log-ins are desirable to criminals whether you are an small or medium sized enterprise (SME) SME or a public company (PLC). In light of robust regulation such as GDPR, their legal obligations in relation to the protection of that data may be the same. In fact, SMEs can be particularly attractive to hackers precisely because of their size.

Smaller businesses often do not have in place the mechanisms necessary to resist an attack. Therefore, attackers see them as easy targets.

In April, the government published the results of its latest annual cyber security survey. Whilst the survey encouragingly reported an increase in the proportion of SMEs who see cyber security as high priority (74%), there is still cause for concern. 
Smaller businesses are less likely to seek information, advice or guidance about cyber security compared to larger businesses.

Only a quarter of small business have cyber security policies in place and even less have received any cyber security training.

Urgent Action
Organisations of all sizes need to implement measures to effectively manage growing cyber-security risks. These are likely to include ongoing assessment of current security capability and implementation of appropriate upgrades, training to minimise human error and the taking out cyber-liability insurance to cover the costs of when things go wrong.

Cyber security is now a key business risk and it is not going to go away. This is reflected in the EU’s recent measures. The sooner SMEs are alive to these risks, the better.

SME Web:

You Might Also Read:

Hackers Don't Only Target Big Business:

UK Cyber Crime Is Increasing In 2019:

 

 

« US Power Grid Attack – No Harm Done. This Time
Smart Cities Call For Mobile Solutions »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Seagate Technology

Seagate Technology

Seagate data storage systems are purpose-built for enterprise and data centre performance, scalability, reliability and security.

Futurex

Futurex

Futurex is a globally recognized provider of enterprise-class data encryption solutions.

Synack

Synack

Synack provides a hacker-powered intelligence platform that uncovers security vulnerabilities that often remain undetected by traditional pen testers and scanners.

PSYND

PSYND

PSYND is a Swiss consultancy company based in Geneva specialized in CyberSecurity and Identity & Access Management.

Zymbit

Zymbit

Zymbit provides hardware security modules (HSM) for IoT devices, including Raspberry Pi and other single board computers.

Aujus Cybersecurity

Aujus Cybersecurity

Aujas is a pure-play cyber security services company with deep expertise in Identity and Access Management, Managed Security and Security Testing services.

Kaspersky Industrial CyberSecurity (KICS)

Kaspersky Industrial CyberSecurity (KICS)

Kaspersky addresses all the cybersecurity needs of industrial organizations in its Kaspersky Industrial CyberSecurity (KICS) portfolio.

Q6 Cyber

Q6 Cyber

Q6 Cyber is an innovative threat intelligence company collecting targeted and actionable threat intelligence related to cyber attacks, fraud activity, and existing data breaches.

ANSEC IA

ANSEC IA

ANSEC is a consultancy practice providing independent Information Assurance and IT Security focussed services to customers throughout the UK, Ireland and internationally.

GRSi

GRSi

GRSi deliver next-generation systems engineering, cybersecurity, technology insertion and best practices-based Enterprise Operations (EOps) management.

Cirosec

Cirosec

Cirosec is a specialized company with a focus on information security. We carry out pentests & audits and advise our customers in the German-speaking countries on information and IT security issues.

QuSecure

QuSecure

QuSecure provides a software-driven security architecture that overlays your current infrastructure and provides next-generation security to protect your entire network from quantum threats.

ImmuniWeb

ImmuniWeb

We Simplify, Accelerate and Reduce Costs of Security Testing, Protection and Compliance.

ClearVector

ClearVector

ClearVector is a leading provider of realtime, identity-driven security for the cloud.

Crygma

Crygma

CRYGMA Quantum-Resistant Cryptographic Machines, the new standard in data encryption.

Nerds On Site

Nerds On Site

Nerds On Site provide on-site & in-home IT and technical support, managed IT services, and cyber security through our collaborative team of highly-trained IT and Security professionals.

Cynch Security

Cynch Security

Cynch Security are passionate about building a world where every business is resilient to cybersecurity risks, no matter what their size.