Focus Group launches cyber security framework for hospitality firms

Hospitality Cyber rolled out among growing threat of cyber attacks

Business technology provider Focus Group has launched a modular cyber security framework built specifically for hotels, restaurants and venues.

The Hospitality Cyber service is delivered through Focus on Hospitality, the group’s specialist division for the sector.

The group, which supports more than 200 UK hospitality businesses, says that the threat of cyber attacks is growing as hotels embrace digital check-ins, cloud-based property management systems (PMS) and online bookings.

It says attackers now target ‘everything from guest Wi-Fi and payment systems to booking engines and supplier accounts’. Stolen credentials, phishing emails, and fake OTA campaigns have ‘become everyday risks’.

Focus says that in one recent case hotel guests received fake payment emails that appeared to come from a well-known online travel agent. Although no systems were breached, it says ‘the reputational hit was real, and costly’.

Focus Group’s Hospitality Cyber aims to help travel companies protect guests, teams, and their brand reputation. The platform consolidates the hotel tech stack under one framework – including the PMS, point of sale (POS) terminals, booking systems and guest Wi-Fi.

“Cyber security is no longer just an IT issue, it’s a guest experience issue,” said Alessandra Leoni, head of hospitality at Focus Group.  “Hotels must treat data protection with the same seriousness as fire safety or hygiene.

“Hospitality Cyber makes that achievable, bringing together strong defences, trained staff, and round-the-clock protection, all designed for the pace and pressures of hotel life.”

Hospitality Cyber has an integrated 24/7 security operations centre (SOC), providing monitoring for IT clients, delivering real-time threat detection and rapid response. It also incorporates Cyber Essentials and Cyber Essentials Plus, which are designed to help hotels prove compliance and commitment to data protection through UK-recognised standards. Using a zero trust network access (ZTNA) security model, it verifies every connection - including teams, contractors, and suppliers – by identity, device, and location, ensuring only authorised users reach hotel systems or guest data.

Hospitality Cyber also offers a managed, step-by-step approach to compliance and resilience to help operators keep up with regulations including GDPR, PCI DSS, and cyber insurance requirements.

“We know hotel teams are under pressure to deliver great service every day,” said Laurence Glenn, head of IT at Focus Group.

“Our role is to make security simple — tools that work with existing systems, minimal disruption, and visible peace of mind. It’s about building confidence, not complexity.”

The platform also provides monthly vulnerability scanning to identify weaknesses in internet-facing systems before attackers do. Its advanced email protection (Mimecast) blocks phishing, spoofing, and malicious attachments. And its security awareness training builds confident, cyber-aware teams who can spot scams, phishing attempts, and social engineering before mistakes happen.