Call us now:
Sellafield processes nuclear waste from other nations, it provides nuclear power to 1,000s of homes across the North East of England and is CNI. If it were ever to suffer a catastrophic failure then there would be serious repossessions for the Country. Sellafield originally denied reports of cybersecurity failings identified by the Guardian newspaper reported in 2023. For management to apologize in 2024. This week Sellafield was fined £330,000 for its failure to manage cybersecurity.
Compare this to reports that the U.S Federal Communications Commission fined T-Mobile a total of $80 million, for several cyber attacks and data breaches starting in 2021. A fine that included mandating remediation of cybersecurity.
While one can argue they are not remotely the same issue. They both demonstrate consistency of approaches by the 2 countries (and the EU) when one considers the fines regime for cybersecurity and data breaches. Approaches that so far one would consider to be diverging, as the U.S and EU aggressively develop cyber regulatory compliance and fines regimes, and the we await the publication of UK cyber strategy. While many will state that regulation and monetary penalties do not drive compliance, it has been a useful tool adopted by the U.S and if the recent Bill proposed by the Senate Finance committee ever gets past, criminal penalties.
https://lnkd.in/e256u5Hs
What would happen if the UK government decided that breaches of cybersecurity compliance of CNI providers were a criminal offence? As seems to be the direction of travel in the U.S and EU.
@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Faisal Khan
Veritas GRC
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7247857404242014208