April Networking – UK Cyber Compliance: Talking Points for Business

This event has a focus on networking. We will have one presentation to hear from an industry expert.

We’d like to thank Mid Sussex Golf Club for sponsoring a great breakfast buffet of bacon baps and similar. Teas and coffees will also be available for our guests.

This event’s presentation will be delivered by Yann Davies, MD of Abcom

The reality

Most organisations only think about compliance when something forces the issue: an audit, a tender, an insurer, or a customer questionnaire. By the time that happens, the pressure is already on.

A few uncomfortable truths

• Passing an audit does not mean you are secure

• Compliance achieved once will decay over time

• Most cyber incidents are caused by basic drift, not advanced attacks

• Documentation does not stop breaches — controls do

Why this keeps happening

• People join, leave, and change roles

• Devices are added, replaced, or taken home

• Cloud services and AI tools are adopted quietly

• Security settings are changed to “just make it work”

Why UK organisations are feeling it now

• Insurers are asking better questions and rejecting weak answers

• Supply chains expect evidence, not reassurance

• Public sector and regulated industries require ongoing assurance

• Regulators increasingly focus on sustained controls, not point-in-time checks

The shift that is starting to happen

Organisations are beginning to treat cyber compliance less like an event and more like an

operating discipline — similar to finance, health & safety, or data protection.

The focus is moving from “Can we pass?” to “Can we prove where we stand right now?”

The takeaway

The organisations that will struggle most are not the ones that fail audits — they are the ones that

only discover their weaknesses when it matters most.