AI toolkit to help businesses tackle cyber security threats

Millions of small businesses could get help to tackle cyber security threats thanks to a new AI-powered solution created by University of Essex researchers being showcased at the Government’s flagship CYBERUK event this week.

The CyberSecurityAId toolkit developed by Professor Haris Mouratidis and Dr Marta F Arroyabe from the Institute for Analytics and Data Science at Essex is being featured in CYBERUK’s SME Innovation Zone after being especially selected by the Department of Science, Innovation and Technology (DSIT).

CYBERUK is hosted by the National Cyber Security Centre and brings together more than 2,000 cyber security leaders and professionals.

Dr Arroyabe, from Essex Business School, said: “Our AI-powered toolkit is gathering substantial interest from stakeholders, including insurers, industry associations, and law enforcement. They recognise the potential of our tool to significantly enhance cyber security practices among small businesses.”

Successful trial for toolkit

CyberSecurityAId was trialed in the south west after successfully bidding for funding from the DSIT's Cyber Local initiative, this allowed the team to link-up with the Cyber Resilience Centre for the South West and MHK Consulting. 

Now the CyberSecurityAId team is working with the Eastern Cyber Resilience Centre to engage with SMEs in the East of England to raise awareness about the need to act on cyber security through workshops, training, and targeted engagement activities.

The positive feedback from south west companies is helping the research team optimise the tool and better understand the needs of businesses.

Professor Mouratidis, from the School of Computer Science and Electronic Engineering at Essex, said: “The feedback indicates businesses feel more confident after using the tool and can identify practical ways to improve their cyber security.

“For many of the businesses we spoke to, the tool served as a catalyst to review or update internal policies — not only to meet regulatory expectations, but also to reduce business risk and improve supply chain readiness.”

Why cyber security is so important to small business

Micro-businesses and sole traders constitute over 95% of businesses in the UK, but they are often the most at risk of cyber crime as they often lack the resources and expertise to implement effective cyber security practices, leaving them exposed to digital threats.

The latest Cyber Security Breaches Survey showed only 3.26% of small businesses follow the 10 basic steps of cybersecurity, only 14% have heard of the Cyber Essential’s accreditation scheme and close to half have not taken any active steps to improve cyber security in the last 12 months.

This is despite the fact 51% have suffered a cyber security breach or attack in the last year and the average total cost of the most disruptive breaches or attacks are estimated to be £4,590.

How CyberSecurityAId can help your business 

Dr Arroyabe: “Our AI-powered conversational tool is designed to respond to the cyber issues SMEs face by helping them understand potential cyber security threats to their businesses and providing relevant actions to mitigate these risks. The tool delivers tailored recommendations and real-time feedback, with a focus on enhancing the cyber security skills and practices of small business managers.

“This tool is designed to empower micro-businesses and sole traders by providing them with affordable and accessible means to enhance their cyber security knowledge and practices. By simplifying the often complex world of cyber security, our tool offers tailored recommendations that aim to protect their key assets, systems and processes. Our product has the potential to make a significant impact on the cyber hygiene of millions of small businesses in the UK, offering both value for users and tax payers alike.

“The personalisation and conversational aspect of our solution sets it apart from traditional cyber security training and awareness short courses, which often offer generic advice. Our solution adapts the learning experience to the user, focuses on their specific business needs and requirements, and empowers small businesses to analyse their cyber security needs without expertise in cyber security. This not only enhances knowledge retention but also ensures the advice is actionable for the business context.”