TechRadar

Fast recovery from cyberattacks leaves firms exposed

UK businesses prioritize speed over security when recovering from breaches, risking reinfection and further attacks.

Nov 6, 2026

6 cards · 1m 20s · tap to begin

From · · 1m 20s

Fast recovery from cyberattacks leaves firms exposed

UK businesses prioritize speed over security when recovering from breaches, risking reinfection and further attacks.

In brief

UK businesses prioritize speed over security when recovering from breaches, risking reinfection and further attacks. Cohesity research shows 74% of UK firms prioritize recovery speed over quality, with 70% failing to verify attackers are fully removed, leaving them vulnerable to reinfection. Originally reported by…

Three in four firms rush recovery

Caution sign data unlocking hackers. Malicious software, virus and cybercrime, System warning hacked alert, cyberattack on online network, data breach, risk of

Cohesity research reveals 74% of UK organizations prioritize recovery speed over quality after cyberattacks, putting themselves at greater risk.

Attackers often left in systems

Nearly 70% of breached UK firms fail to verify that attackers have been fully removed from their systems after a cyberattack.

Prevention gets the budget

Three-quarters of surveyed UK businesses admit cyber resilience investments focus too heavily on prevention rather than response and recovery.

CEOs expect unrealistic timelines

CEOs expect unrealistic timelines

Half of UK CEOs expect basic business operations to resume within just 24 hours, creating a false sense of security about recovery readiness.

Responsibility remains unclear

UK firms disagree on who decides which systems restore first: 23% say the entire board, 21% the CTO, 20% the CEO, 14% a security advisory board.

Define what must survive first

Cohesity urges firms to define their Minimum Viable Company: essential systems and services needed to continue operations after attack. Only 17% have documented, tested definitions.

“If you restore a system before verifying attacker access has genuinely been removed, you risk reinfecting yourself.”

The headline

Cohesity research shows 74% of UK firms prioritize recovery speed over quality, with 70% failing to verify attackers are fully removed, leaving them vulnerable to reinfection.

Read the original on TechRadar

More news from the United Kingdom

How we make summaries

React

Sign in to react and comment.

Comments (0)

Life is short. Keep it sweet. Respect others' opinions and be kind!

    Recommended next

    More decks on cybersecurity and related topics.