The UK lags behind European organizations in addressing software vulnerabilities, taking an average of 225.4 days to remediate Known Exploited Vulnerabilities (KEVs), while European entities take 220.6 days; in contrast, German organizations resolve KEV CVEs in only 21

 UK organizations take longer to remediate software flaws compared to European counterparts

7 days, the fastest in Europe. For non-KEV vulnerabilities, UK organizations require over two years (736.6 days) for patching, compared to 573.9 days across Europe. Globally, KEVs are resolved within six months, highlighting UK CISOs' need for faster mitigation strategies despite fewer detectable KEVs in their environments. This points to a vital necessity for business leaders to prioritize security actions and prompt responses to vulnerabilities, emphasizing rapid resolution and deep insight to minimize risks and improve security postures.
https://www.infosecurity-magazine.com/news/uk-lags-europe-exploited/