Assess your organisation’s security posture across access control, endpoint security, network defences, data protection, and people & process. Get a risk score with prioritised remediation steps.
| Statistic / Attack Vector | Impact | Frequency |
|---|---|---|
| Phishing Attacks | Most common attack vector - 83% of breaches | Constant |
| Ransomware | Average ransom demand £570K+ for UK businesses | Rising |
| Credential Theft | Stolen passwords used in 49% of breaches | Very High |
| Business Email Compromise | Average loss £10,000+ per incident | High |
| Insider Threats | Account for 25% of all data breaches | Moderate |
| Unpatched Vulnerabilities | 60% of breaches involve known unpatched CVEs | High |
| Supply Chain Attacks | Third-party compromise affecting multiple victims | Rising |
| UK Business Breach Rate | 39% of UK businesses reported a cyber attack in 2024 | Annual |
Sources: UK Government Cyber Security Breaches Survey 2024, IBM Cost of a Data Breach Report. Contact Cloudswitched for professional security assessment and managed protection.
Try our other free security assessments and IT planning tools.
A proper risk assessment weighs technical controls (firewalls, patching, backups), policies (access control, incident response), staff training, and past incident history together, since weaknesses in any one area increase overall exposure. This calculator scores your organisation across those factors to highlight priority gaps.
Phishing and social engineering remain the most common entry point for UK SMEs, often exploited because staff are not routinely trained to spot suspicious emails. Weak or reused passwords and unpatched software are close behind, and all three are typically addressable at relatively low cost.
Most UK SMEs benefit from a formal review at least annually, plus after any significant change such as new software, remote working policy changes, or a security incident. Threats and controls both evolve quickly, so a static one-off assessment loses accuracy within months.
Many UK cyber insurers now require evidence of baseline controls - MFA, endpoint protection, regular backups, and patch management - before offering cover, and some adjust premiums based on assessed risk level. A documented risk score can also speed up the underwriting process.
Powered by industry-leading technologies including SolarWinds, Cloudflare, BitDefender, AWS, Microsoft Azure, and Cisco Meraki to deliver secure, scalable, and reliable IT solutions.
6 Oct, 2026
M365 email archiving is the thing most UK businesses believe they have and very few have configured. The belief usually comes from a reasonable source...
3 Oct, 2026
VoIP security is usually discussed as a technical problem, and the technical controls are well understood encryption for signalling and media, session border...
1 Oct, 2026
A business ISP comparison conducted on headline speed and monthly price will mislead you on both counts. The speed is frequently an up to figure describing a...