New research has revealed a worrying gap between cybersecurity policies and real-world practice in the UK’s technology sector. 

According to the Cyber Culture Clash report from compliance training provider Skillcast, tech and SaaS companies rank among the best for cybersecurity policies but the worst for operational resilience. 

The study found only 36% alignment between what firms say and what they do – the widest gap of any industry.

While tech companies lead the way in ISO 27001 adoption, policy transparency and dedicated cybersecurity staff, the report found 69% experienced a cyberattack in the past year – more than any other sector. 

Phishing click rates hit 40%, whilst ICO-reported incidents have surged 40% in two years.