Connect with us

Business & Technology

UK businesses warned over email governance blind spots

Published

on


Exclaimer has urged organisations to tighten controls over outbound email governance after new UK data showed that 83% of IT leaders had experienced an email-related security incident.

The findings suggest a gap between investment in cloud access security and oversight of what leaves company systems through email. Only 38% of UK enterprises have fully integrated email into their wider security and compliance stack, limiting central control over external communications.

The warning comes as UK businesses continue to face persistent cyber risks. Government survey data cited by Exclaimer shows that 43% of UK businesses reported a cyber breach over the past year, with phishing and other email-borne threats still the most common route in.

While much of the security debate has focused on inbound threats, Exclaimer argued that outbound email has received less scrutiny. Governance, it said, often breaks down at the point of sending, where individual users, manual processes and disconnected tools create inconsistency.

Exclaimer also highlighted the financial impact of cyber incidents, citing research that puts the average cost of a significant cyber attack to a UK business at almost £195,000. Across the UK, that amounts to roughly £14.7 billion a year.

Communication Risk

Karl Bagci, Director of IT and Information Security at Exclaimer, said the main issue for many organisations is no longer basic awareness of email risk, but the ability to apply controls consistently across large volumes of communication.

“World Cloud Security Day is a reminder that most organisations have gotten very good at controlling who gets into their systems, but far fewer are controlling what comes out,” said Bagci. “Email is still one of the most trusted and heavily used business channels, but it remains one of the least consistently governed at scale. What we’re seeing is a shift in risk from infrastructure to behaviour: how people communicate, what they send, and whether those communications are controlled.”

That argument reflects a broader shift in security priorities as businesses adopt more cloud software and spread work across more devices and users. The challenge, according to Exclaimer, is maintaining oversight once communication leaves tightly controlled systems and becomes part of day-to-day staff activity.

This is particularly relevant where disclaimers, branding and compliance messages are handled by individual employees rather than enforced centrally. In those cases, organisations may struggle to ensure that every message meets internal policy or external regulatory requirements.

Blind Spot

Bagci said the weak point often sits at the boundary between secure systems and employee actions.

“This creates a critical blind spot at the point where communication exits the organisation, affecting compliance, brand integrity, and customer trust,” he said. “Without centralised governance, businesses have limited control over how disclaimers are applied, how regulatory requirements are met, or how consistently the organisation is represented across every interaction.”

That concern is likely to be more acute in regulated sectors, where missing or inconsistent information in customer emails can create legal or compliance problems. Even in less tightly regulated industries, inconsistent messaging can still affect customer confidence and corporate reputation.

Exclaimer linked the trend to the growing scale and complexity of business communication. It cited IBM research showing that one in six data breaches now involve AI-driven attacks, underlining how quickly communication volumes and risks are changing.

Real-Time Oversight

Exclaimer argued that managing email risk at scale requires policy-led controls applied in real time, rather than relying on manual action by staff. The issue becomes more pressing as email traffic spreads across users, devices and AI-assisted tools.

Exclaimer, which sells email signature management software for Microsoft 365 and Google Workspace, framed the issue as one of governance rather than simple technical defence. In its view, cloud security efforts have become stronger at controlling access to systems, but less effective at controlling the information that leaves them.

“World Cloud Security Day serves as a timely reminder that cloud security is no longer just about protecting systems. It is about managing the flow of information across them. And that includes looking at how you govern your email communications,” said Bagci.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Business & Technology

Finance professionals raise AI compliance & GDPR fears

Published

on


Cloud2Me has published survey findings showing widespread use of artificial intelligence among finance and accountancy professionals, alongside growing concern about compliance and data security risks.

The survey found that 74% of respondents use AI at least a few times a week, while 60% use it daily. ChatGPT and Microsoft Copilot were the most commonly used tools, accounting for 55% of reported usage between them. Many professionals said they used more than one platform for different tasks.

Frequent exposure to AI appears to have made many accountants and finance workers more adept at identifying machine-written material. Respondents pointed to recurring signs such as unusual formatting, generic language, and excessive structure or punctuation.

Some said they noticed a mismatch between the language in AI-produced content and the known style of clients or candidates. Others cited factual errors, including cases where AI-generated material did not align with UK accounting rules or contained obvious mistakes.

One respondent highlighted an incident in which a chief executive officer used a diagram showing eight days in a week. Another said AI was being used in reverse to check whether job candidates had relied on it to prepare interview answers.

Adoption Gap

The findings also pointed to a gap between adoption and internal controls. Four in 10 respondents said they chose AI tools mainly because they were convenient or recommended by others, rather than for accuracy or compliance reasons.

That may draw attention in a sector that handles sensitive financial information and operates under strict regulatory obligations. The survey also recorded concerns about where uploaded data is stored and how client information is handled once entered into consumer AI tools.

Several respondents said unsafe AI use had already led to internal disciplinary action. This suggests some firms are dealing with governance issues after adoption rather than before it.

Helen Brooks, Head of Commercial at Cloud2Me, said: “These findings reflect a profession that is maturing in its relationship with AI – but maturing unevenly. Finance and accountancy professionals are sharp enough to spot AI-generated content, yet many are still selecting tools based on convenience rather than compliance credentials.

“In a sector where accuracy and data security are non-negotiable, that gap is a real risk. The GDPR concerns raised here are not hypothetical; they are already resulting in disciplinary action. The question for practices now is not whether to use AI, but whether they have the governance in place to use it responsibly.”

Detection Skills

The responses offered a detailed picture of how finance professionals say they recognise AI-written material. One participant wrote, “M dashes, underscored, conversational speak. It’s a red flag,” while another said, “The big dashes in the answers.”

These comments reflect growing familiarity with the stylistic patterns associated with widely used generative AI tools. Respondents also complained about polished but generic phrasing, saying it often failed to match the communication habits of the person it purported to represent.

One participant described that contrast directly: “You know your clients, and the vocabulary doesn’t correlate to the individual.”

Sector Pressure

The accountancy profession has been under pressure to assess how AI fits into daily work without undermining rules on privacy, record-keeping, and accuracy. Firms are increasingly weighing productivity gains against the risk that models may generate false information or process data in ways that create legal and reputational exposure.

Cloud2Me supports more than 500 accountancy practices across the UK. It provides hosted desktop and managed cloud services for accountants, bookkeepers, and finance teams.

The survey suggests AI use is no longer experimental for many professionals in the sector. The sharper question raised by the responses is whether firms can match that routine use with controls strong enough to prevent errors, misuse, and breaches involving client data.

As one respondent put it: “Several staff members had to have disciplinaries over unsafe AI practice. Where is the data we upload going? Where is it stored? Big GDPR problem.”



Source link

Continue Reading

Business & Technology

Keyloop buys Motortech.ai to boost Fusion AI tools

Published

on


Keyloop has completed the acquisition of Motortech.ai, bringing Motortech.ai’s AIME product into its Fusion automotive retail platform.

The deal adds an AI-based customer communications tool for car retailers’ sales and service operations. AIME will be integrated across core parts of Fusion, including Vehicle Hub, Acquisition Hub and Sales Hub.

Motortech.ai is a UK-based developer of automotive retail software. Its main product, AIME, is designed to handle online customer conversations that would otherwise go through website forms or sales staff.

According to Keyloop, the software can respond to customers at any time of day, search vehicle stock, provide finance quotations, value part exchanges, capture test-drive preferences and book appointments. The system is intended to reduce lost leads caused by slow response times and limited out-of-hours support.

AIME also screens customer interactions before passing higher-intent leads to sales teams. By the time a lead reaches staff, the software may already have checked stock, produced finance quotes and valued a part exchange, reducing the time employees spend on each potential sale.

Tom Kilroy, chief executive officer of Keyloop, set the acquisition within the group’s wider use of artificial intelligence in dealership software.

“The acquisition of Motortech.ai and integration of AIME across Fusion is a significant milestone in our AI strategy. By embedding purpose-built conversational AI directly into our platform, we’re giving retailers an always-on capability that engages customers and frees sales teams to focus on what they do best – building relationships and closing deals,” said Kilroy.

Dealer Results

Keyloop cited early results from one dealer already using AIME on its website. The retailer deployed the system as part of an effort to improve customer satisfaction and reduce the number of separate IT tools in use.

Over a three-month period, the dealer’s web conversion rate rose fourfold to 14.5%, according to figures supplied by Keyloop. Sales also increased by 101% over the same period.

Keyloop said the retailer generated GBP £18 in profit for every GBP £1 invested in the software. The business also saved the equivalent of 19 full working days, allowing sales staff to spend more time on customer interactions.

Platform Push

The move expands Keyloop’s presence in AI tools for automotive retail, an area where software providers are trying to help dealers automate more of the customer journey while preserving human involvement in higher-value conversations. By placing AIME inside Fusion rather than offering it as a separate product, Keyloop is seeking to integrate customer communications with the wider systems that manage stock, websites and sales processes.

The acquisition follows an initial agreement to buy Motortech.ai reached earlier this year.



Source link

Continue Reading

Business & Technology

Logiq acquires Savient to expand South-West presence

Published

on


Logiq has acquired Savient, expanding its presence in south-west England.

Both companies serve clients in regulated sectors, including government, defence and other security-sensitive areas. Savient specialises in software consultancy, development and technical services for organisations involved in science, engineering and next-generation technology programmes operating under strict assurance and operational requirements.

Founded in 2018, Bristol-based cyber security consultancy Logiq said the deal brings Savient’s specialist team into the business. It now has more than 175 specialists working on security assurance, system delivery and secure solutions for organisations running systems in tightly controlled environments.

The acquisition also strengthens Logiq’s regional footprint in an area closely tied to the UK’s cyber security and national security market. Bristol and the wider south-west have become an important base for suppliers serving defence, government and critical national infrastructure, particularly as security-cleared staff remain in short supply.

The move comes amid sustained demand for cybersecurity services across the public sector and defence. Companies in these markets face mounting pressure to find specialists with experience delivering in restricted and high-assurance settings as departments and contractors update systems while meeting security and compliance requirements.

According to transaction details, Savient brings established customer relationships and delivery experience in programmes with stringent controls. Logiq said these strengths complement its existing work and broaden the combined group’s reach across secure government and regulated sectors.

James Morgan, chief executive officer of Logiq, described the acquisition as an extension of the company’s growth strategy.

“Logiq has continued to deliver sustained organic growth and, whilst we’ve been deliberate about how we scale, this is a strategic acquisition that reinforces what we already do well. Savient have an exceptional reputation across Government, and we are excited to work alongside a highly capable team with deep experience of delivering in secure environments. Their trusted client relationships align closely with our own. Our capabilities are highly complementary, and we’re excited to expand our presence within the UK’s Cyber Security capital,” Morgan said.

Savient will be integrated into Logiq rather than operate as a separate business. Existing clients will continue to receive service during the transition, with both teams working together to maintain delivery standards and customer relationships.

Sector Focus

The deal highlights continued consolidation in specialist technology and cybersecurity services linked to government and defence. Smaller consultancies with niche expertise in data, software and secure delivery have become attractive targets for firms looking to deepen client access and add cleared personnel without relying solely on recruitment in a constrained labour market.

For Logiq, the acquisition adds a business with practical delivery experience in programmes where systems must operate under strict operational rules. Savient has built its business around customers in complex, high-assurance environments, closely matching Logiq’s focus on secure and resilient system delivery.

Andrew Alhadeff, managing director of Savient, said the fit between the two businesses was clear.

“We’ve built Savient around supporting clients in complex, high-assurance environments, where delivery has to work in practice, not just in theory. Savient’s technical solutions transform business not only for clients but also change the experience of their employees and customers. There is a very clear and very strong alignment with Logiq’s approach and becoming part of Logiq allows us to scale that capability while continuing to support our clients with the same focus and expertise,” Alhadeff said.

The combined organisation said it would support a broader range of programmes across secure government and regulated sectors, with greater depth and capacity to deliver in complex environments.



Source link

Continue Reading

Trending