The unfortunate truth for UK businesses regarding suffering a cyber-attack is that it is not a matter of if, but when.