Data
Health
Check
2023


Introduction

In 2023, cyber is the leading cause of IT downtime – and data loss. Last year, cyber took over as the leading cause of data loss. This year, it has also become the leading cause of IT downtime. Now, cyber is undeniably the top concern for IT professionals from a continuity and resilience perspective.

In this year’s Data Health Check, we’re focusing on the growing importance of cyber insurance. As cyber incidents become increasingly prevalent, we look at how companies are preparing to protect themselves from the financial and reputational damage that can result from a breach.

Ransomware remained a huge problem this year, costing UK organisations hundreds of millions of pounds. We reviewed what ransomware meant for IT professionals in 2023, and the challenges it presented.

Finally, we’re continuing to provide valuable insights on Business Continuity, Data Protection, and Disaster Recovery. These elements have been the backbone of the Data Health Check since our first survey in 2008. We break down how organisations responded to cyber crises this year – and how companies in different industries fared in these key areas.

Welcome to the 2023 Data Health Check.

BC,
DISASTER
RECOVERY &
RESILIENCE

Cyber-attacks are now the leading cause of downtime - and data loss

Last year, cyber became the top cause of data loss. This year, it also takes on the top spot for IT downtime.



What was the biggest cause of IT downtime for your organisation?

What was the biggest cause of IT downtime for your organisation?

What were the causes of data loss?

What was the biggest cause of IT downtime for your organisation?

How well can we respond to a crisis?

50%+ Experienced a cyber-attack last year

of organisations are confident in their
ability to respond in a crisis

3 Organisations experienced over 100 cyber attacks in the last year

could survive less than one day without IT
systems (up from 46% in 2017)



How long could your organisation survive without its crucial IT systems?

A higher-than-ever reliance on IT systems


Cyber-attacks are now the leading cause of downtime - and data loss

The importance of IT systems in business operations has never been greater. More than two-thirds of companies have reported they could only survive less than one day without their crucial IT systems. A clear trend is emerging as the Maximum Tolerable Period of Disruption reduces year-on-year.



CYBER

Have you reviewed your supply chain's vulnerabilities in the last 12 months?

Managing supply-chain vulnerability


Managing supply-chain vulnerability

The challenge in managing the security and resilience of your supply chain is that it is outside your direct control. Just over half of all organisations reviewed their supply chains for vulnerabilities.

The growing cyber threat

50%+ Experienced a cyber-attack last year

of organisations experienced a
cyber-attack

3 Organisations experienced over 100 cyber attacks in the last year

of organisations experienced a
ransomware attack

Our IT Security budget has increased

IT security budgets continue to increase


IT security budgets continue to increase

The trend of increasing IT security budgets over the past six years continues. This year, almost half of companies reported increases.




RANSOMWARE

Our organisation experienced a ransomware attack this year

The growing risk of ransomware


The growing risk of ransomware

Organisations reported an increase in the number of ransomware attacks compared to 2022, but only a quarter are “extremely confident” in their team’s ability to respond to a ransomware event.

Conclusion

While the prevalence of cyber threats continues to grow, we have seen some major wins this year.

Compared to previous years in the Data Health Check, more organisations have cyber insurance, cyber security training is more frequent, and more are being proactive in their defence against cyber threats.

The rate of growth in cyber-attacks is unlikely to slow. That is why it’s imperative that we have the right security measures in place. So, when it does happen, we’re ready to respond quickly and efficiently.