Call us now:
Today the UK government published a policy statement for its Cybersecurity and Resilience Bill. A bill that proposes to strengthen UKL cybersecurity and resilience of its essential services.The bill aligns with much of what other partner nations are regulating today for cybersecurity. With alignment with EU NIS 2, through an increased scope of companies covered by existing UK regulation. Including bringing MSPs into scope. Increasing regulatory oversight of cybersecurity of Operators of Essential Services and Relevant Digital Service Providers. Empowering regulators to ensure that cybersecurity measures are being implemented.Enabling the government to direct regulators and regulated entities to take action when necessary for national security. Enabling the government to take action and issue directions to regulated entities to address cyber threats.The government did not take the bold step in aligning its thinking with other nations such as the EU, US, Canada or Australia. It kept its cyber standards aligned with NCSC CAF. At a time when other regulators provided greater clarity over there approaches including being specific around appropriate cyber frameworks and standards such as NIST, or ISO. Although the door has been left open for future regulatory refinement.The Bill expands the current NIS cyber incident reporting requirements ‘to capture incidents that are capable of having a significant impact on the provision of the essential or digital service, and incidents that significantly affect the confidentiality, availability, and integrity of a system’. Reporting to regulators and the NCSC.One believes there are some positive steps taken to address cybersecurity, albeit there’s a way to go to align the bill with partner nations cybersecurity risk management regulations. One only has to consider EN NIS 2 and DORA, the SEC Final Cyber rule of this weeks update by the Australian Signals Directorate to consider what that these are.@Thaddeus Dziekanowski Brian D. McCarthy Faisal KhanVeritas GRC National Cyber Security Centre#cybersecurity #cyberriskmanagement #cyberregulation
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7312787284167184385