It is now widely recognised by most boards and risk management and IT security professionals that it is not a question of if, but when a cyberattack will occur.

Increasingly sophisticated cyberattacks can catch even well-governed organisations offguard, exposing them and their customers to possible identity theft and fraud, and threatening the organisation’s reputation, customer base and revenue.

The cyber risk landscape is constantly evolving, and the threats have gone much further than putting just a company’s data at risk. Business interruption and associated reputational concerns have never been voiced by organisations as much as they are now, but still we know awareness remains an issue and companies are still being far too reactive in their protocols.