In December 2023 a report was written for the UK Parliament setting out gaps in UK cyber strategy, policy and delivery that need to be closed.( The…

← Back to Blog

In December 2023 a report was written for the UK Parliament setting out gaps in UK cyber strategy, policy and delivery that need to be closed.(https://lnkd.in/eHgs-89i) The enclosed is the formal response from the UK Government to that report. It makes for interesting reading when one considered the back drop of cyber threats, frequency of attacks, UK wanting to ‘continue to be a leading responsible and democratic cyber power’ and the responses made to manage cyber by partner nations.

There are a few key themes, the government sets out
1. It will continue to adopt the NIS program, through multiple regulators. NCSC will provide technical support and define quality standards for commercial services. NCSC will continue to provide action-orientated guidance.
2. The UK Government allocated £85.8 million to UK local authorities for digital transformation and cyber. NCSC will continue to work with Local authorities to manage cyber.
3. The Government works with private sector firms to provide cyber services to UK firms and will continue to do so.
4. The Government does not generally intervene in the insurance market and insurance pricing is decided by insurers.
5. Under reporting of cyber incidents is an issue. Work needs to be done to increase incident reporting.
6. The National Crime Agency Budget will increase to £860million in FY 2023/24. Some of this will be used to tackle ransomware.
7. The Government we will use sanctions to stop Russian hackers.
8. The Government will look to improve regulations.

It is difficult to comment on the Governments response, at a time when the cyber threat is understood, its effects are well documented, society is under resourced to manage the risk and above all regulators are taking active steps to implement cyber regulation outside of the UK. When companies like Microsoft report cyber incidents and incidents such as UnitedHealth effect nations healthcare in the U.S; NIS 2 will have a significant impact on EU CNI providers, DORA on EU Financial instructions and the SEC final rule on public firms in the U.S; cyber budgets are increasing globally and the threat from cyber is one that effects national security; when we hear about many reports of cyber attacks globally but few in the UK.

One can only say that the perception of cybersecurity outside the UK is very different to that within the UK. That UK partners are taking a different approach to managing cyber risk, that we should learn from. Or we are better at cybersecurity risk management than everyone else?

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC

#cybersecurity #cyberriskmanagement

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7173227989109841920