0121 222 5630

Email Aristi Ltd Follow Aristi Ltd on Facebook Follow Aristi Ltd on Twitter Follow Aristi Ltd on LinkedIn Follow Aristi Ltd on Google Plus


You are here:

Private Sector.

The financial damage to British companies from cyber security breaches has doubled in the past year, according to a government-commissioned survey.

The survey also found that the severity and impact of attacks has increased over the last 12 months. The average cost of the worst cyber security breach for big companies was between 600,000 pounds and 1.2 million pounds, up from 450,000-850,000 pounds in the 2013 survey. The cost of sweeping up after a breach is often greater than the cost of preventing the breach in the first place.

Often the reason these attacks succeed is not because companies have not spent money on the latest security equipment as some vendors would have you believe. It’s the basics that companies fail to get right.

All businesses should have data ownership assigned and be able to answer these questions with confidence:

  • What are my critical data assets;
  • Where is this data within the business?
  • Who has access to these data assets?
  • What is the impact to the business if these data assets were subjected to unauthorised disclosure or modification?
  • What is the impact to the business if we lost access to these data assets?

Information security should be led by top management and embedded within the culture of the organisation so it becomes a natural process.

Having worked in the IT industry for the last 20 years our consultants see some common themes emerge which lead to a failure of security within organisations leading to security breaches. These include data ownership assigned to the IT Department rather than the business, lack of management buy in and poor security awareness across the organisation.

We can provide a range of services to de-risk businesses and protect reputation. These include:

  • Security assessments to identify weaknesses that could result in the business being susceptible to cyber attack
  • IT Health Checks to identify potential vulnerabilities in IT systems
  • Security awareness training for senior management and staff
  • Identification and valuation of critical data assets
  • Risk assessments
  • Review and development of information security policies and procedures
  • Compliance with ISO/IEC 27001, the international standard for information security

Contact us for more information or to discuss your specific requirements.


Please contact Aristi to discuss your requirements. Filling in the form below is the quickest way to get in touch with the relevant person at Aristi.


Keep up-to-date with insights and info on all areas of Information Assurance, Information Security, Penetration Testing & Data Sharing from the award-winning consultants Aristi.

Latest Tweets

Still using Windows 7? https://t.co/TZq4J1xXNl
https://t.co/yRF05uVC9i These scams are getting more realistic. User awareness is crucial to detect malicious emails from legitimate ones.
If Marriott Hotels couldn’t protect their data when they were subject to data breaches, how can your business?:… https://t.co/2DKYoum6zP

Subscribe to our Newsletter

Latest Blog Posts

  • 500 million customers can’t sleep easy with Marriott data breach

    The world’s largest hotel chain, Marriott Hotels, announced on Friday (November 30, 2018) that half a billion of its customers’ data had been breached dating as far back as 2014. Marriott owns more than 5,800 properties around the world with 1.1 million rooms spread across more than 110 countries[.  That makes this incident is a […]

    Written on Wednesday, 12 December 2018
  • Virtual Data Protection Officer

    The GDPR introduces a duty for you to appoint a data protection officer (DPO) if you are a public authority, or if you carry out certain types of processing activities. To support your on going GDPR compliance and management requirements, we can provide a Virtual Data Protection Officer (vDPO) service giving you access to independent […]

    Written on Thursday, 10 May 2018
  • Protecting Businesses with Cyber Essentials

    The lack of basic cyber security controls remains a significant factor in the vast majority of cyber attacks in the UK today. Businesses are left worried about hackers, data loss and security, and are not sure where to turn. The scale of the threat is nothing new.  The media now regularly covering stories of data […]

    Written on Monday, 05 March 2018