The Information Commissioner’s Office (ICO) offer great insight into data security incident trends and specialist companies can offer advice on how to protect your business against cyber threats.

The National Cyber Security Centre have also created a Cyber Essentials guide which can help you guard your organisation against cyber-attacks. BIBA have issued guidance on the uses of cyber insurance. 

When you become aware of a potential cyber incident, you’ll need to do the following:

• Report the incident to the regulators within the required timescales, following advice from your Legal and/or Compliance teams – this includes the ICO and FCA. 
• Report any suspected or actual data incidents to all your insurer partners, in line with the terms of your TOBA.
  
  

• Staff training and cyber security awareness: Staff with knowledge of cyber security threats can help keep your business safe. Generating awareness among your employees about the prevalent and emerging cyber threats is one of the most effective ways of protecting your business against cyber attacks.
• Implement a Phishing Incident Response tool: Educating your employees will only take you so far if you don’t equip them with the means of dealing with cyber threats. A phishing incident response tool can empower employees to detect and report suspicious emails right away, significantly reducing cyber risks.
• Conduct regular Vulnerability Assessment and Penetration Testing (VAPT): Testing helps detect any exploitable vulnerabilities in your organisation’s IT infrastructure, including applications, servers and networks. Make sure to fix the detected weaknesses as soon as possible.
• Keep systems updated: Keep all your hardware and software up to date with the latest security updates and patches. Without them, you can create weaknesses in your security infrastructure which could lead to cyber attacks.
• Implement Multi-Factor Authentication (MFA) across all the applicable endpoints of your organization’s networks: This will not only add an extra layer of security but also protect you in case your employees’ user credentials are stolen.
• Government’s Cyber Essentials Scheme and Certification: Refer to the government scheme and get your organisation set up to guard against the most common cyber threats. 
• Get appropriate Cyber Insurance cover: BIBA has great guidance on this topic.