CYBER CRIME Simon Newman, head of Cyber and Business Services at the Police Crime Prevention Initiatives, discusses the reporting, or under-reporting, of cyber incidents and reducing the vulnerability of organisations to cyber crime and fraud
HOW CAN WE ADDRESS THE UNDER-REPORTING OF CYBER-CRIME? C yber crime is one of the biggest threats to the security of the UK. Categorised as one of four high priority areas within the government’s National Security Strategy, the threat is constantly evolving, affecting millions of individuals and businesses alike. Yet despite the efforts of government to raise awareness about the importance of good cyber security, the problem continues to grow, accounting for just under half of all crime according to recent data published by the Crime Survey for England and Wales (ONS). While this figure is alarming, of even greater concern however, is the fact that only a fraction of these crimes are reported to the authorities. For example, in 2019, there were approximately 4.6 million incidents of cybercrime and fraud over the previous 12 months but only 338,00 of these were reported to Action Fraud – just seven per cent of the total. This compares to 17 per cent of sexual
12
COUNTER TERROR BUSINESS MAGAZINE | ISSUE 43
assaults being reported to the police, 30 per cent of thefts and 60 per cent of burglaries. So why does cyber crime suffer so poorly from under-reporting when compared against other forms of crime? At the Police Digital Security Centre (PDSC), we regularly speak to victims of cyber crime and ask them about their experience. What we consistently find among the business community in particular, is that speaking to the police about it is not a priority. One of the main reasons for this is that businesses face a number of competing demands for their attention when they suffer an attack or breach. For some, lawyers will be the first people they call, particularly if there is a risk that personal data has been compromised. Others will prioritise customers, staff and suppliers. Business owners may also have to think about speaking to their insurers, their bank or their Managed Service Provider. As a result, the police are often an afterthought. E
