Remote access and wireless network points becoming focus of security breaches

June 2004 Cyber Security

More than half of UK businesses now provide their staff with access to their information systems over dial-up or the Internet. Among large companies the figure is 86%, up from 71% two years ago. Other 'enabling' technologies such as wireless networks have also mushroomed over the last two years, leading to a rise in security incidents and breaches which are of growing concern to business. Yet companies do not appear to be taking the threats seriously enough. These are among the initial findings from the 2004 Department of Trade and Industry's biennial Information Security Breaches Survey, conducted by a consortium led by PricewaterhouseCoopers LLP (UK).

Key findings from the survey of some 1000 companies include:

* All sizes of UK business have significantly increased their use of remote access since 2002 when the DTI Survey was last carried out; likewise a third of companies now have wireless networks compared to just 2% two years ago.

* Some 35% of businesses use Personal Digital Assistants (PDAs), 57% in the case of large businesses.

* Wireless networks are becoming a focal point for external attack, with 8% of businesses that have them reporting attempts at unauthorised access, while a significant number - 23% - say that they did not know whether they had been probed.

* For those companies that suffered attempts at unauthorised access, the number of incidents was low, with two-thirds reporting 10 or less, although one in seven identified over 100 attempts.

* Despite the obvious threats, it is not always the case that companies providing remote access deploy additional security controls - a quarter of businesses rely on their normal network password controls, despite the fact these are often easy to 'crack'.

* Large businesses tend to deploy better controls; twice as many had deployed a virtual private network (VPN), while three times as many used two-factor authentication or digital certificates.

* Similarly with wireless networks, only one in five of all companies used wired equivalent privacy (WEP) or other additional encryption, while surprisingly more than half of wireless networks had no additional security controls at all.

* Very few organisations have woken up to the risk posed by PDAs as indicated by the fact that 58% of businesses that use them have no security measures in place to protect the business data on them; large companies fare a little better, but even then 38% have no controls.

* Those controls that do exist are usually on usage policies rather than technological protection.

These findings are published in a fact sheet - 'Remote Access' which can be downloaded from, or

According to Andrew Beard, the PricewaterhouseCoopers advisory director leading the survey, "Businesses seem to be dragging their feet when it comes to introducing security controls over remote access to their systems. There are several reasons for this. First, many of those who want remote access appear to be the least aware of the additional risks it entails and/or are senior people in the organisation and have the power to authorise it. Second, the majority of companies do not analyse their security incidents in a way that enables them to identify, which are caused by remote access. Lastly, awareness of the available security techniques is poor, leading to inappropriate security controls being deployed."

For more information contact Derek Nash, PricewaterhouseCoopers, 0944 20 7804 3058,

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Insights from the 2023 Cloud Security Report
News Cyber Security
Increased costs, compliance requirements, hybrid and multi-cloud complexities, reduced visibility, and a lack of skilled practitioners cause organisations to slow or adjust their cloud adoption strategies.

New algorithm for OT cybersecurity risk management
Industrial (Industry) Cyber Security News Commercial (Industry)
OTORIO’s new risk management model and attack graph analysis algorithm technology, calculates OT cybersecurity threats and provides risk mitigation actions, prioritised according to actual exposure and potential impact on operations.

Veeam finds 93% of cyberattacks target backup storage
Cyber Security
Veeam unveils the results of its 2023 Ransomware Trends Report, showing cyber insurance is becoming too expensive and 21% of organisations are unable to recover their data after paying the ransom.

Cybersecurity providers must first protect themselves
Cyber Security
In a joint advisory released by cybersecurity agencies across the United States, UK, Australia, Canada and New Zealand, managed security service providers (MSSPs) have been warned of a sharp increase in cyberattacks targeting their systems.

Cyber attackers used over 500 tools and tactics in 2022
Cyber Security News
The most common root causes of attacks were unpatched vulnerabilities and compromised credentials, while ransomware continues to be the most common ‘end game’ and attacker dwell time is shrinking – for better or worse.

Addressing the SCADA in the room
Industrial (Industry) Cyber Security
Few other sectors command the breadth of purpose-built and custom devices necessary to function, as the industrial and manufacturing industries. These unique devices create an uncommon risk that must be assessed and understood to fully protect against incoming attacks.

Recession or stress?
Cyber Security News
The economic landscape has seen many technology companies lay off vast numbers of employees, but for cybersecurity, the picture looks very different – a dynamic mixture of excitement, challenges and toxicity.

Vulnerabilities in industrial cellular routers’ cloud management platforms
Industrial (Industry) Cyber Security Security Services & Risk Management
Research from OTORIO, a provider of operational technology cyber and digital risk management solutions, unveils cyber risks in M2M protocols and asset registration that expose hundreds of thousands of devices and OT networks to attack

NEC XON appoints Armand Kruger as Head of Cybersecurity
News Cyber Security
NEC XON has announced the appointment of Armand Kruger as the Head of Cybersecurity. Kruger will oversee all cybersecurity offerings including cybersecurity strategy, programmes, and executive advisory.

Caesar Tonkin new head of cybersecurity business, Armata
News Cyber Security
Vivica Holdings has announced the appointment of cybersecurity expert Caesar Tonkin to head up its cybersecurity business Armata, which provides technology solutions and niche expertise needed to help businesses better protect themselves.