Insurancebusinessmag UK Firms Struggle to Quantify Cyber and Supply Chain Risks
Article Content
- •Only 21.6% of UK firms have a formal risk management plan for business interruption.
- •27.3% of UK businesses reported significant financial losses due to business interruptions.
- •Aon suggests using advanced analytics to better quantify risk exposures.
Aon’s report reveals that UK businesses are inadequately prepared to manage converging risks from business interruption, cyber incidents, and supply chain disruptions. The report indicates that 27.3% of firms faced significant financial losses from business interruptions, while 30.8% suffered from supply chain issues, and 9.3% from cyber incidents. Despite these challenges, only a small percentage of organizations have formal risk management plans or have quantified their exposure to these risks. Aon emphasizes that without proper quantification, businesses cannot make informed decisions regarding investments and insurance coverage. The report also highlights that recent storms have exacerbated these risks, leaving many businesses without power and unable to trade. The findings suggest a significant opportunity for brokers to address the quantification gap and help clients improve their risk management strategies.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What percentage of firms have risk management plans?
What are the main risks identified?
How can firms improve their risk management?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…