Cyber security incentives and regulation review 2020

AAT Licensed Accountants believe a combination of factors are responsible for ineffective cyber security management. Although a lack of understanding was identified as the biggest single issue, almost half of those members surveyed indicated it was a lack of understanding, lack of capacity, lack of commercial rationale and the complexity involved that combined to act as barriers to effective cyber security management.  

The AAT Cyber Security Survey found that 86% of its Licensed Accountants want AAT to provide help, information, advice and guidance on cyber security. This is likely to be replicated by other professions and their respective professional bodies, so this could provide a helpful route for government to utilise.  

The information and guidance most wanted by AAT members is how best to identify threats. However, over a quarter want case studies (27%) and one in five (21%) want information on the impact of a cyber incident (reputational damage, financial costs etc). This is all information that is readily available, but such demand suggests it may not be sufficiently well distributed or signposted.  

The Cyber Security Skills Strategy is welcome but does not go far enough. Given the frequently stated government commitment to making the UK the best place to start and grow a digital business, a requirement for all students to have basic digital skills – an essential component of which is cyber security - at GCSE grade 4 (grade C) or above, in the same way that most employers currently require for GCSE Maths and English would be a positive development.