Report by Commvault

UK Businesses More Exposed to Major Cyber Incidents Than Any Other Country

11 FINDINGSPublished Aug 19, 2025
View Original Report →

Key Findings

61% of UK organisations have created defined runbooks, roles, and processes for incident responses, which is ahead of the global average of 41%.

UKIncident response

93% of UK businesses have experienced a business-critical cyber incident.

UKCyber incident

UK organisations are 11% less likely to have tested their recovery plans within the last month compared to other countries.

UKRecovery

65% of UK organisations have an inventory of business-critical systems and dependencies, which is ahead of the global average of 50%.

UKInventory

Only 36% of UK organisations strongly believe that they should prioritise the minimum viability approach.

UKMinimum Viability Company

52% of UK organisations stated that the biggest challenge to achieving Minimum Viability Company (MVC) status is the complexity of existing systems and applications.

UKMinimum Viability Company

Almost a third (30%) of UK organisations cited difficulties separating 'core' systems from less business-critical, 'broader' operations as another primary barrier to achieving Minimum Viability Company (MVC) status.

UKMinimum Viability Company

47% of UK organisations cited the struggle to keep recovery plans in line with changing business needs as the biggest challenge to achieving Minimum Viability Company (MVC) status.

UKMinimum Viability Company

57% of business-critical incidents in the UK occurred in the past 18 months.

UK

Only 7% of the UK businesses surveyed reported never having experienced a "business-critical" incident, which is less than the 14% reported for the rest of the world.

UK

UK organisations are 21% less likely to have a dedicated environment in which to recover compared to other countries.

UK