--- title: Businesses using GDPR as catalyst to enhance cyber risk management description: A survey of 1,300 senior executives reveals that the most-prepared firms are using the GDPR as a catalyst to up their game in cyber risk management. image: https://businessinsights.bitdefender.com/hubfs/GDPR-infographic.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) [#IT Compliance & Regulations](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) [#Privacy and Data Protection](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) By [**Filip Truta**](https://businessinsights.bitdefender.com/author/filip-truta) / Oct 17, 2017 # Businesses using GDPR as catalyst to enhance cyber risk management Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/businesses-using-gdpr-as-catalyst-to-enhance-cyber-risk-management&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/businesses-using-gdpr-as-catalyst-to-enhance-cyber-risk-management&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/businesses-using-gdpr-as-catalyst-to-enhance-cyber-risk-management&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/businesses-using-gdpr-as-catalyst-to-enhance-cyber-risk-management&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/businesses-using-gdpr-as-catalyst-to-enhance-cyber-risk-management&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/businesses-using-gdpr-as-catalyst-to-enhance-cyber-risk-management&utm_medium=social&utm_source=facebook) A survey of 1,300 senior executives at companies doing business in the EU reveals that the most-prepared firms are using the General Data Protection Regulation (GDPR) as a catalyst to up their game in cyber risk management. Eight months from now, the European Union plans to deal onerous fines to companies found noncompliant with the GDPR. To comply, businesses that process EU customer data must: demonstrate accountability; appoint a Data Protection Officer (DPO); take special precautions when moving data across borders; encrypt their systems; have a recovery plan in case of a cyberattack, and more. Over the past few months, analytics giants across the globe have conducted studies to [assess the preparedness](https://businessinsights.bitdefender.com/us-businesses-invest-more-in-gdpr-readiness-than-uk-counterparts-many-havent-even-started-implementation?hsLang=en-us) of companies ahead of GDPR taking effect next year. The most common finding is that, with each passing month, businesses are becoming more aware of the importance of compliance – if not for the sake of their customers then for the sake of their business. A recent [survey](https://www.marsh.com/us/insights/research/approaching-gdpr-deadline-spurs-organizations-to-cyber-risk-management-action.html?utm_source=publicrelations&utm_medium=referral-link&utm_campaign=cyber-survey-report-2017) by Marsh further confirms this trend. The insurance broking and risk management company polled 1,300 senior executives on GDPR matters and found that 65% now consider cyber as a top-five risk (up from 32% last year). The number makes sense, considering that 23% of respondents said their European organizations fell victim to a successful cyber-attack in the past 12 months. ![GDPR-infographic.jpg](https://businessinsights.bitdefender.com/hubfs/GDPR-infographic.jpg)*Source: [Marsh](https://www.marsh.com/)* Some 69% said their company was fully compliant encryption-wise, and 49% said they had developed a cyber-incidence response plan. 27% reported increasing or restructuring their cyber risk insurance and 78% said they plan to increase spending on addressing cyber risk over the next 12 months. This is all good news, but it’s *all* the good news. According to the same survey, only 8% of companies handling EU customer data believe they are fully compliant with the GDPR requirements. 57% are developing a plan for compliance, and 11% have not yet developed or are not even considering developing a plan. More worryingly, a staggering 24% have no clue about the implications of noncompliance. This data point corroborates [findings](https://businessinsights.bitdefender.com/most-global-organizations-dont-fully-understand-the-consequences-of-not-complying-with-gdpr?hsLang=en-us) by analytics firm SAS in a similar survey this spring, when 42 percent of respondents indicated that their organizations were not fully aware of this impact. As of May 2018, a company found noncompliant with the GDPR risks having to pay up to 4% of the company’s annual revenue, or up to €20 million (whichever is highest) in penalties. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [GDPR & EDR: Protecting Personally Identifiable Information of EU Citizens](https://businessinsights.bitdefender.com/gdpr-edr-protecting-personally-identifiable-information-of-eu-citizens?hsLang=en-us) ### [Most Companies in US and Canada Gather User Data through Third-Party Code without Telling Customers, Survey Finds](https://businessinsights.bitdefender.com/most-companies-in-us-and-canada-gather-user-data-through-third-party-code-without-telling-customers-survey-finds?hsLang=en-us) ### [Why Businesses Should Consider MSPs as Cybersecurity Partners, Not Vendors](https://businessinsights.bitdefender.com/why-businesses-should-consider-msps-as-cybersecurity-partners-not-vendors?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Filip Truta", "url" : "https://businessinsights.bitdefender.com/author/filip-truta" }, "datePublished" : "2017-10-17T13:45:55.000Z", "headline" : "Businesses using GDPR as catalyst to enhance cyber risk management", "image" : [ "https://businessinsights.bitdefender.com/hubfs/GDPR-infographic.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/businesses-using-gdpr-as-catalyst-to-enhance-cyber-risk-management", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```