Banks still failing on basic cyber hygiene - urged to consider "underlying causes"

Sick to the back teeth of telling organisations to patch their software, or to stop using “p@ssword” as their password – the UK’s financial regulators have called on firms to “consider the underlying causes of cyber risk.”

That should include “analysing systemic gaps, such as poor asset management, weak identity controls, or inadequate third-party oversight.”

Efforts to “enhance maturity” across governance frameworks, and improved “mapping of long-term capabilities” would also be welcome, a trio of market watchdogs said, publishing industry penetration testing findings.