Fact checkPoliticsPublished October 16, 2026

“42 percent of UK organizations do not have a formal cyber resilience strategy.” — Andy Ward. Our verdict: Unverified.

“42 percent of UK organizations do not have a formal cyber resilience strategy.” — Andy Ward. Our verdict: Unverified.
Andy WardNews reportOctober 16, 2026

Andy Ward made the claim in an article on dofonline.co.uk published on 16 October 2026.

Our verdict

Unverified

We could not find enough public evidence to confirm or refute the claim that 42% of UK organisations lack a formal cyber resilience strategy. The sources we reviewed cover related cyber risks, but do not verify this specific figure.

Know something that settles it? Send us evidence

What we found

The article in dofonline.co.uk attributes the 42% figure to Andy Ward, but does not provide the underlying research. A report by Business Chief on a government cyber survey does not mention the figure. PwC reports a different measure: the share of global leaders with fully formalised operational continuity plans for cyber threats. That does not establish whether the 42% claim about UK organisations is accurate.

The evidence

3 sources, all background: none settles the claim either way.

Contradict 0Support 0Background 3
When each source was published
pwc.com · Oct 2026 · backgrounddofonline.co.uk · Oct 2026 · backgroundOct 2026Oct 2026
  • Background

    The article attributes the claim that 42% of UK organisations lack a formal cyber resilience strategy to Andy Ward, but the underlying research is not provided. [1]

  • Background

    Business Chief reports on a government cyber survey but does not mention the 42% figure or whether organisations lack formal strategies. [2]

  • Background

    PwC reports that 39% of global leaders have fully formalised operational continuity plans for cyber threats. This is a different measure and does not confirm or refute the claim about UK organisations. [3]

What we could not confirm

  • The source and method behind the 42% figure, including how UK organisations and a formal cyber resilience strategy were defined.

How we checked

We looked for the figure in publicly available reporting on government cyber surveys and compared it with a separate industry report on cyber planning. These sources did not directly measure whether UK organisations have formal cyber resilience strategies; readers with relevant evidence are invited to send it to us. We reviewed 3 relevant sources.

Sources

  1. [1]dofonline.co.uk · Major UK cyber attack is ‘inevitable’, AI minister warns · October 16, 2026
  2. [2]businesschief.com · Cyber Breaches Survey: Business Cybersecurity is at Risk
  3. [3]pwc.com · 2027 Global Digital Trust Insights: Cybersecurity trends · October 1, 2026

Help us check this claim

We could not find enough public evidence to confirm or refute this claim. If you know of an official record, dataset, transcript or report that settles it, send us the link. We review every submission and update this fact check when the evidence changes the picture.

Measured Take updates fact checks when new evidence emerges. Corrections are noted on the page.

All fact checks