A01 chaf6542 06 se fm indd

Small < 50 staff

Large > 250 staff

Any security incident

87%

93%

Accidental incident

59%

91%

Malicious incident

76%

69%

Serious incident

32%

31%

Figure 11.25

UK information security breaches

Source: BERR (2013).

Attacks by an unauthorised outsider

(including hacking attempts)

Other incidents caused by staff

Theft or fraud involving computers

Infection by viruses or

malicious software

Systems failure or data corruption

ISBS 2013 - large organisations

ISBS 2013 - small businesses

ISBS 2012 - small businesses

20

0

40

60

80

100

59%

66%

46%

59%

41%

40%

47%

16%

12%

84%

57%

45%

78%

60%

41%

M11_CHAF6542_06_SE_C11.indd   573

7/23/14   1:27 PM

---

574

Part 3  Implementation

BERR (2013) has recommended 11 steps to help companies of all sizes improve security 

in business. We have included some simple, extra ideas reflecting use of personal devices 

(BYOD), cloud services, social media, etc., which are becoming more common in small busi-

nesses. The 11 steps are: