VENDING SECURITY


Building cyber resilience F


igures from the Government show another increase in cyber


security breaches or attacks last year, with the Cyber Security Breaches Survey 2024 advising that the most common cyber threats are ‘relatively unsophisticated’. Here Lauren Wills-Dixon, solicitor and data privacy expert at law firm Gordons, sets out some of the legal, regulatory and best practice measures that


businesses should consider to help build cyber resilience. Cyber security continues to pose a challenge for all industries, and businesses in the vending industry, are no exception. As our reliance on digital technologies and connected systems to manage, monitor and improve efficiencies keeps growing, so does the threat of cyber- attack and malicious activity. Figures published in the recent report from the UK’s Cyber Security Breaches Survey 2024, which details the cost and impact of cyber breaches attacks on businesses, charities and educational institutions, are alarming.


14 | vendinginternational-online.com Half of businesses (50%) report having experienced some form of


cyber security breach or attack in 2023, and the figures are higher for medium (70%) and large businesses (74%) and high-income charities with £500,000 or more in annual income (66%). By far the most common type of breach or attack is phishing (84%


of businesses), followed by others impersonating organisations in emails or online (35% of businesses) and viruses or other malware (17% of businesses and 14% of charities). The report estimates that the single most disruptive breach from each business, of any size, cost an average of approximately £1,205 - for medium and large businesses, this rises to approximately £10,830. Clearly this is a challenge for organisations, in any sector, but


particularly those which rely heavily on IT infrastructure and connected systems to streamline their operations. However, the good news is that cyber security can be maintained with some relatively simple steps, particularly when supported by a third party provider or professional advice. While the report notes that phishing attacks have become


more sophisticated because of an advancement in technology, it also states that the most common cyber threats are “relatively unsophisticated.” With this in mind, here are some of the legal, regulatory and best


practice measures that we are increasingly supporting clients with, to help build cyber resilience.


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24