State of Cyber
Security in Housing Report 2023
The Swarle Process. The Stepping Stones To Success.
Cyber security is a priority across all organisations and sectors, irrespective of their size, maturity, or reputation. According to a 2022 report, more than 80% of UK organisations experienced a successful attack in 2021/2022. These attacks are not only on the rise (71% in the previous annual findings), but are also becoming more sophisticated and attracting media attention.
Cyber criminals have targeted the housing sector in an attempt to steal data from thousands of people and in some cases to hold the provider to ransom. While some attacks have targeted them directly, others have been via unknowing third-party suppliers such as maintenance partners.
01
How prepared is the housing sector?
02
Managing security risk
03
What should a comprehensive cyber security strategy look like for your housing association?
How prepared is the housing sector?
We asked NHF Members who participated in the survey how prepared they felt housing associations are to deal with a cyber attack or data breach. The overall results show that there are gaps in the social housing sector, but also a clear understanding that there is a need to better protect their organisation with a robust cyber security strategy.
Ransomware
A ransomware attack is a type of cyber attack in which malicious software (malware) is used to encrypt an organisation or individual’s data or block access to their computer systems. The attackers then demand a ransom in exchange for providing the decryption key or restoring access to the compromised systems.
Our survey findings showed that 50% of housing associations feel the housing sector is somewhat underprepared or underprepared for a ransomware attack, with only 4% of housing associations saying they feel the housing sector is fully prepared for a ransomware attack.
A 2022 report stated that over a 12 month period, ransomware attacks affected 73% of organisations in the UK, rising 15% from the previous year. With this increase, the development of more sophisticated attacks and the sector often being a target for attackers, it is crucial that housing associations put appropriate measures in place to protect their organisation and those they serve
50%
4%
of housing associations feel the housing sector is somewhat underprepared or underprepared for a ransomware attack.
of housing associations say they feel the sector is fully prepared for a ransomware attack
Managing security risk
Managing security risk explores the crucial aspects of establishing appropriate organisational structures, policies, and processes to comprehensively understand, assess, and systematically manage security risks associated with the network and information systems that support essential functions. By implementing robust measures, housing associations can proactively mitigate risks, protect sensitive data, and ensure the integrity and availability of critical operations.
In our survey, we asked housing associations to rate their organisation’s maturity and confidence in several areas scoring themselves from 0 - 10.
Organisations who rated themselves as 8 or above would be considered as having a more mature approach to the relevant area.
Protecting against cyber threats is a critical aspect of ensuring the security and resilience of a housing association’s network and information systems. In an increasingly interconnected and digital landscape, the risks of cyber attacks pose significant challenges to the confidentiality, integrity, and availability of essential functions
This section examines key findings related to managing security risks and highlights the measures taken by housing associations to define, implement, and enforce policies and processes around system and data security.
It also explores the effectiveness of access management, data protection, resilience against cyber attacks, and the security awareness and skills of staff. By understanding these findings, Housing associations can enhance their strategies and defences, proactively safeguard sensitive information, and mitigate the potential impact of cyber threats on their operations.
Get in touch with our housing specialists today
For more information on how we can help protect housing associations like yours, book your free one-to-one consultation today with Greg Dean.