Addressing the UK’s trust gap in cyber risk management

CyXcel's research reveals that a lack of trust in third-party vendors leaves UK businesses exposed to escalating digital threats.

New research by CyXcel, a global cybersecurity consultancy, has highlighted a worrying gap in the UK's digital risk landscape. Nearly three in ten UK risk managers claim insufficient trust in third-party vendors, escalating their risk factors and threatening their business stability.

This trust deficit is both a vendor and a visibility issue. According to CyXcel, over a quarter of UK respondents are unaware of the risks they manage, complicating vendor evaluations. As companies increasingly outsource areas like cyber incident response (26%), AI adoption (20%), and geopolitical risk management (21%), they must confront a fragile risk stance without trusted partners or internal clarity.

The challenge intensifies with converging threats: AI-driven attacks, geopolitical instability, and sophisticated cybercrime. These conditions demand more than mere contracts or one-time vendor reviews. Instead, businesses need intelligence-led, validated partnerships, alongside systems for real-time assessment, questioning, and course correction.

Compounding this, organisations investing £75,000 to £100,000 yearly in risk tools remain unsure of their effectiveness. One in four risk managers feels overwhelmed by the complexities they face. It's crucial to evaluate whether outsourcing is strategic or stems from inadequate internal risk comprehension.

CyXel's Digital Risk Management (DRM) platform addresses these challenges by offering insights into AI-related risks across all sectors, regardless of organisation size. The DRM platform aids in identifying risks and formulating appropriate policies and governance. Notably, it brings together cyber, legal, technical, and strategic insights, developed from decades of experience.

This platform provides real-time vendor assurance and remediation, assuring organisations of their third-party integrity. In light of rising supply chain attacks and stringent third-party oversight regulations, CyXcel’s DRM is shifting organisations from a reactive to a resilient posture.

Lenovo research highlights a growing AI execution gap as organizations struggle to control and...
AvePoint has introduced updates to its Confidence Platform, with a focus on AI data protection,...
The Q1 2026 RF Front-End Modules & Components report highlights recent patent activity and...
Exploring the UK's focused strategy to accelerate data centre growth amidst AI and cloud storage...
Kao Data partners with Discover Tech, aiming to provide immersive tech sector experiences for young...
Barracuda research reveals how attackers leverage device code authentication for persistent access,...
Infosecurity Europe 2026 will include coverage of how artificial intelligence is being applied in...
British organisations are increasingly adopting AI agents but face challenges in orchestration and...