BT: Cybersecurity Training Gap Puts SMEs at Risk
A joint study by BT and Be the Business has recently revealed a concerning trend among UK small and medium-sized enterprises (SMEs): two in five (39%), equivalent to around two million businesses, have not provided any cybersecurity training for their teams.
The finding comes despite the fact that 42% of small businesses reported a cyberattack in the past 12 months, a figure that rises sharply to 67% for medium-sized businesses.
The growing cost of inaction
The impact of cyber breaches on SMEs continues to escalate. Data from the UK Government indicates that micro and small businesses pay an average of US$10,900 to recover from their most disruptive cyber incidents. Beyond the financial loss, downtime, reputational damage and erosion of customer trust pose long-term risks.
The study highlights the continued lack of preparedness among many smaller businesses, particularly at a time when cyberattacks are escalating in both volume and sophistication.
Phishing and ransomware on the rise
Phishing remains the most prevalent form of cyberattack, affecting 85% of UK businesses. However, ransomware attacks are increasing at an alarming rate. In 2024, fewer than 1 in 200 businesses reported a ransomware breach; by 2025, that number doubled to 1 in 100.
The nature of the attacks is evolving. New vectors, such as account takeovers using stolen credentials and the emerging threat of “quishing” – QR code-based phishing scams – are becoming more widespread. Notably, quishing attacks have surged by 1,400% over the past five years.
Link between cyber resilience and growth
BT’s more exhaustive cybersecurity research reveals a strong correlation between cyber agility and business performance.
Companies that proactively manage their cybersecurity show an average 20% higher growth rate compared to those that do not.
The finding reinforces the view that strong cyber defences are no longer optional; they are a necessary enabler of growth.
BT strengthens support for SME cyber defence
In response to the emerging risks, BT is enhancing its security product offering. It has launched a comprehensive cybersecurity training package specifically designed for SMEs. By design, the training equips smaller organisations with practical, cost-effective tools and strategies to mitigate cyber risk.
The programme covers next-generation threats, including the use of artificial intelligence and quantum computing in cybercrime. It educates teams on real-world risks such as credential theft, social engineering and malware proliferation.
Tristan Morgan, Managing Director for Security at BT, highlighted the urgency, stating: “At BT, our mission is to enable UK businesses to grow and prosper and we know the challenges SMEs face protecting themselves from growing cyber threats.
"These often include budget constraints and the lack of a dedicated cyber team, but for SMEs, a cyber attack isn’t just an inconvenience; it poses an existential threat.
“The good news is that effective cybersecurity doesn’t require corporate-grade resources. With the right training, basic security measures and awareness, SMEs can dramatically reduce their risk profile.
"The key is recognising that, in today’s digital landscape, cybersecurity is not a luxury but a foundation that enables companies to face forwards confidently, rather than forever looking over their shoulder.”
Navigating cybersecurity in a changing landscape
The study found that 18% of SMEs identified AI-driven threats as their top cybersecurity concern. Interestingly, nearly seven in ten (69%) business leaders are exploring the use of AI tools to enhance their security posture.
When seeking guidance, nearly half (46%) of SME leaders turn to industry experts, the most trusted source of cybersecurity advice.
BT’s latest research and training initiatives underscore the vital role telecom providers can play in supporting SMEs in addressing evolving digital threats.
By combining strategic insight with actionable solutions, BT is positioning itself not just as a service provider but as a key cybersecurity partner to the UK’s small and medium-sized business community.
Explore the latest edition of Mobile Magazine and be part of the conversation at our global conference series, Tech & AI LIVE and Cloud & 5G LIVE. Discover all our upcoming events and secure your tickets today.
Sign up to receive the Mobile Magazine weekly newsletter.
Mobile Magazine is a BizClik brand
