Addressing the UK’s trust gap in cyber risk management

CyXcel's research reveals that a lack of trust in third-party vendors leaves UK businesses exposed to escalating digital threats.

  • Thursday, 17th July 2025 Posted 2 months ago in by Aaron Sandhu

New research by CyXcel, a global cybersecurity consultancy, has highlighted a worrying gap in the UK's digital risk landscape. Nearly three in ten UK risk managers claim insufficient trust in third-party vendors, escalating their risk factors and threatening their business stability.

This trust deficit is both a vendor and a visibility issue. According to CyXcel, over a quarter of UK respondents are unaware of the risks they manage, complicating vendor evaluations. As companies increasingly outsource areas like cyber incident response (26%), AI adoption (20%), and geopolitical risk management (21%), they must confront a fragile risk stance without trusted partners or internal clarity.

The challenge intensifies with converging threats: AI-driven attacks, geopolitical instability, and sophisticated cybercrime. These conditions demand more than mere contracts or one-time vendor reviews. Instead, businesses need intelligence-led, validated partnerships, alongside systems for real-time assessment, questioning, and course correction.

Compounding this, organisations investing £75,000 to £100,000 yearly in risk tools remain unsure of their effectiveness. One in four risk managers feels overwhelmed by the complexities they face. It's crucial to evaluate whether outsourcing is strategic or stems from inadequate internal risk comprehension.

CyXel's Digital Risk Management (DRM) platform addresses these challenges by offering insights into AI-related risks across all sectors, regardless of organisation size. The DRM platform aids in identifying risks and formulating appropriate policies and governance. Notably, it brings together cyber, legal, technical, and strategic insights, developed from decades of experience.

This platform provides real-time vendor assurance and remediation, assuring organisations of their third-party integrity. In light of rising supply chain attacks and stringent third-party oversight regulations, CyXcel’s DRM is shifting organisations from a reactive to a resilient posture.

EU Data Act spurs SMEs to rethink cloud strategies

Posted 1 day ago by Aaron Sandhu
The EU Data Act is pushing SMEs and MSPs towards a multi-cloud, multi-vendor approach to mitigate vendor lock-in while fostering business agility.
Nebula Global Services joins the ranks of the UK's fastest-growing businesses, marking a milestone in sustainable technology innovation.
11:11 Systems unveils research revealing IT leaders' overconfidence amidst cyber threats, with Europe facing intense complexities and urgent need for...

Assurix pioneers real-time trustmark for MSPs

Posted 1 week ago by Aaron Sandhu
Assurix unveils a groundbreaking trustmark, offering live proof for MSPs to fortify proposals and minimise insurance challenges.
Cisco's upcoming 360 Partner Programme signals a transformative shift for partners, introducing a streamlined, value-driven approach.
A true competitive advantage is what separates thriving companies from those struggling to keep pace in today’s demanding marketplace. The...
Over 300 MSP leaders gather for a day of critical strategy, technical innovation and growth‑oriented panels; “M&A” and “MSP Growth” panels...

Arrow Electronics triumphs at ChannelWatch Awards 2025

Posted 1 month ago by Aaron Sandhu
Arrow Electronics secures four prestigious recognitions, cementing its leadership in the IT distribution sector.