The UK Governments Department for Science, Innovation and Technology commissioned Ipsos to complete it latest annual review of the UK’s…

← Back to Blog

The UK Governments Department for Science, Innovation and Technology commissioned Ipsos to complete it latest annual review of the UK’s Cybersecurity Skills Gap. It is a comprehensive report that makes for an interesting read. As many are aware the UK is unprepared for cybersecurity risk management and has a way to go to align itself with peers in the U.S, EU and Australia.

The results are subjective, but do place a marker in the sand. The report outlines that the UK has not moved forward much over the past 6 years with 44% of businesses (637,000) having a ‘basic skills gap’, where responsible cyber employees lack the confidence to carry out basic task laid out in ‘Cyber essentials’. 27% have gaps in advanced skills. 30% of cyber firms face problems with the technical skills gap with pen testing and cryptography skills down on previous years.

The problem ahead for the UK is our baseline for cybersecuirty is low, as demonstrated by the report. If our bar is cyber essentials, or cyber essentials plus, UK companies stand little chance of managing cyber risk. Our partners are regulating cybersecurity risk management across CNI and Financial Services. Setting out regulations for boards of organisations to manage cybersecurity, to standards such as NIST SP 800-171, NIST SP 800-53, ISO 27001 and cyber risk standards. Or face criminal or civil penalties. These standards are orders of magnitude more complex than those adopted by the UK. They set a bar of compliance that UK industry must aspire to remain competitive, and secure.

If the UK cannot provide the skills that national and international industry require, at a minimum to the baselines to protect industry from cyber attack. Cyber attacks that are increasing in frequency, complexity and severity. Then the UK has a problem, a problem that requires a more radical solution.

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Faisal Khan

Veritas GRC Senebria

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7241723849451401216

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags