Data Encryption, Cyber Insurance Policies and Data Loss/Breaches

I would like to know please, to what extent you have implemented data encryption and cyber insurance policies and the data loss/breaches that you have incurred as per the following questions: 1. How many laptops, mobile, tablet or USB devices have been lost or stolen from your organisation in the past year (Jan 2023-Dec 2023) Please specify numbers of each device type. 2. How many of these devices were encrypted? Please specify numbers of each device type. 3. Have you had to disclose or inform the ICO of a data breach* as a result of any of these devices being lost or stolen in the past year (Jan 2023-Dec 2023)? 4. Have you had to disclose or inform the ICO of a data breach* for any other reason e.g., cloud breach, supply chain breach...? 5. How many data breaches*, of any kind, have you experienced within your organisation/department within the past year (Jan 2023-Dec 2023)? 6. Do you have an existing cyber insurance policy in place, and how long have you had it? If not, do you plan to invest in cyber insurance in the coming year? 7. Have you had to claim on an existing cyber insurance policy in the past year (Jan 2023-Dec 2023) - if so, what was the reason for this i.e. ransomware attack, phishing scam...? Breach definition* - information that has been lost, stolen or taken from a system without the knowledge or authorisation of the department/organisation.


FOI Reference : 1249854
Received Date: 21/02/2024