NAVIGATING BREXIT
Need practical advice on navigating Brexit?
Discover our practical steps for business leaders
Public sector services Home
- Adult social care
- CFO Insights
- Energy and environment
- Healthcare advisory
- How to buy our services
- Infrastructure finance
- PlaceMakers leadership programme
- Public sector advisory
- Public sector assurance
- Forensic and investigations services
- Public sector governance and risk
- Public sector insight studio
- Real estates and assets
Real estate Home
Article
Is now the time to set up a healthcare REIT?
The emergence of specialist REITs focused on specific asset classes is good news for both investors and operators.
- Risk
- Compliance assurance
- Cyber advisory Cyber advisory
- Cyber security
- Data analytics
- Enterprise risk management
- Finance and risk management services
- Internal audit services
- People, culture and organisation
- Projects, capital programmes and transformation
- Technology risk services
- Third party and contract assurance
Given the proliferation of cybercrime, cyber risk is an ongoing concern for organisations.
Challenges are specific to an organisation, but the rate of technology adoption can easily outpace its ability to manage the associated risks. These include risks to intellectual property, customer data and sensitive internal data, including data on senior executives and board members. The inevitability of a breach also demands a clear and practical cyber incident response plan.
Organisations need a broader, deeper, more dynamic and comprehensive risk management approach. The competitive, technological and regulatory environments demand it, as do customers, suppliers, investors and other stakeholders.
Most organisations already possess many useful elements of a cyber risk management program. For example, policies, firewalls, access management tools and third-party due diligence hold a key place in a cyber risk program.
Linkage with an organisation’s IT strategy also plays an essential role. Regulatory compliance remains as important as ever. Yet a lack of an aligned, integrated and measurable cyber risk management program renders most cyber risk initiatives inadequate, inefficient or both.
The recent spate of industry-wide data breaches has resulted in organisations to think differently about risk management.
What you need to do now
Complacency is no longer an option. To safeguard reputation, innovate and grow, organisations need to protect their intellectual property, customer information and other customer information assets by:
- Assessing the effectiveness of their current systems, controls and processes
- Evaluating the performance of your business continuity, IT disaster recovery and crisis management arrangements
- Reviewing vendors’ and other key partners’ security arrangements
- Establishing long term strategic programmes, designed to maintain and develop the maturity and effectiveness of your cyber resilience arrangements.
How we can help
By training organisations to prepare and deal with incidents as well providing you with technical support, our experts can assist you with cyber breaches to limit the damage, establish what went wrong, resolve the situation and then work with you to prevent a reoccurrence.
- Our cyber team offers a comprehensive suite of services and business solution to help you assess and manage any cyber threat in the following areas:
- Business resilience
- Payment security (PDF 1800kb) [ 1841 kb ]
- Cyber resilience (PDF 640kb) [ 640 kb ]
- Cyber incident management (PDF 842kb) [ 842 kb ]
- Penetration testing (PDF 648kb) [ 648 kb ]
- Technology security
- Identity and access management
- Cyber essentials (prepare, protect, detect, crisis management, remediate)
- Data protection including the General Data Protection Regulation (GDPR) (PDF 585kb) [ 1689 kb ]
Certifications
We are CREST certified, offering you assurance over the quality and standard of our technical security services.
CREST provide internationally recognised accreditations across the information security sector, including penetration testing and cyber security incident response.
