Security integrator Vistorm has claimed that almost half of UK firms are leaving themselves open to data breaches.

The VAR assessed 100 UK businesses against 31 information assurance controls and found that 48 per cent had failed to put robust security policies and procedures in place to prevent data loss. This is despite 79 per cent knowing which of their assets are business-critical and 91 per cent understanding the consequences of non-compliance.

Vistorm listed securing data at rest and in use, mail and messaging gateway protection, secure archiving and storage and securing data in motion as the most vulnerable areas.

Firms were found to be more up to speed in areas such as web gateway protection, anti-virus and malware protection, compliance management, data transfer controls and identity and directory controls.

Dan Turner, chief technology officer at Vistorm, claimed there is a pressing need for firms to fortify their defences.

“While it is difficult to prevent employees from losing devices, IT departments can stop the information from falling into the wrong hands and being misused,” he said.

“This has become even more potent with recent news that the UK’s privacy and data protection watchdog, the Information Commissioner’s Office, is seeking the power to fine businesses up to 10 per cent of their revenues for breaking data laws.”

Vistorm’s research follows an industry report from Ponemon Institute, which found 8,500 mobile devices were lost at UK airports in 2009. Almost half (49 per cent) of European business travellers also admit their laptops contain confidential information and 42 percent admitted that their data was not backed up, the research found.