Call us now:
One finds the article interesting (I can’t find the report mentioned) by the UK NCSC, that is responsible for advising on UK cyber strategy. One would say that cybersecurity in the UK is not so much lax when it comes to defensive corporate cyber. It is at best lax, at worst it is does not exist to effectively deal with the highly profitable, adaptable cyber threat that now exists. What makes this more difficult for the UK is that partner nations are addressing gaps in defensive cybersecurity through regulations, that the UK has no control over. Cyber regulators in the U.S and EU are introducing cyber regulations that will severely effect UK industry.
Cyber is a threat that adapts quickly and effectively to target the unprepared, at their cost. That is driving U.S and EU to regulate defensive cyber risk management on the private sector. Requiring UK firms to adopt cyber risk management if they trade in or with the U.S or EU. While one can argue that regulation is not the way forward, what options are there now given the cyber threat?
The UK lags behind other nations on addressing cyber. The agency responsible for UK cyber strategy reports our cybersecurity is lax, one would argue that our cyber strategy does not address the challenges the UK faces? One would argue our cyber standards are not fit for purpose, as of May 2023 over 132,000 cyber essentials certificates were issued to UK companies. At a time when our partners regulators are driving standards, that will impose significant fines on covered entities and their boards, what will the UK do to address the coverage gap. What will UK industry do as cyber risk management becomes a competitive differentiator, will it recommend cyber essentials as a reciprocal standard?
It paints a disturbing picture of UK cyber strategy, security and defensive cyber.
Ted Dziekanowski
#cybersecurity #cyberregulation #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7108345431062929408