Small and medium-sized businesses (SMBs) across the UK are struggling to turn cybersecurity plans into practice, according to new research from Kaspersky.
The findings reveal that 67% of UK SMBs lack fully actionable cybersecurity strategies, with many acknowledging a gap between their theoretical plans and real-world implementation. This shortfall leaves a majority of businesses vulnerable to an increasingly sophisticated cyber threat landscape.
The research also highlights a disconnect between executives and IT leaders on the importance of cybersecurity. Nearly a quarter (22%) of IT leaders say that C-level executives in their organizations do not fully understand the strategic value of cybersecurity, slowing progress towards effective, organisation-wide protection.
Despite these obstacles, many SMBs recognize the need for outside expertise. More than a third (38%) are now seeking external cybersecurity partners who can help build long-term, sustainable protection strategies. Rather than relying on ad hoc solutions, SMBs increasingly want trusted partners who can provide continuous awareness training, immediate incident response and transparent advice.
“Cybersecurity can’t remain a theoretical exercise,” said Oscar Suela, Kaspersky general manager, Iberia, UK & Ireland. “The findings show that while many SMBs have well-intentioned strategies, these often stay on paper. To close the gap, organisations must turn plans into action, embed security into everyday operations, and ensure leadership and IT are fully aligned in their approach.”