UK government exempting itself from flagship cyber law inspires little confidence


From May’s cyberattack on the Legal Aid Agency to the Foreign Office breach months later, cyber incidents have become increasingly common in UK government.

The scale extends far beyond these high-profile cases: the NCSC reports that 40 percent of attacks it managed between September 2020 and August 2021 targeted the public sector, a figure expected to grow. Given this threat landscape, why does the UK’s flagship Cyber Security and Resilience (CSR) Bill exclude both central and local government?

Read more…
Source: The Register News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Britain to create 2,000-strong cyber force to tackle Russia threat

    September 21, 2018

    Britain is significantly increasing its ability to wage war in cyberspace with the creation of a new offensive cyber force of up to 2,000 personnel, Sky News understands. The plan by the Ministry of Defence and GCHQ comes amid a growing cyber threat from Russia and after the UK used cyber weapons for the first time ...

  • British spies ‘hacked into Belgian telecoms firm on ministers’ orders’

    September 21, 2018

    British spies are likely to have hacked into Belgium’s biggest telecommunications operator for at least a two-year period on the instruction of UK ministers, a confidential report submitted by Belgian prosecutors is said to have concluded. The finding would support an allegation made by the whistleblower Edward Snowden five years ago when he leaked 20 slides exposing the ...

  • Bristol Airport blames hackers for three day technical meltdown

    September 16, 2018

    A cyber attack was the cause behind a three day technical meltdown, according to Bristol Airport. The airport’s information screens were out of service on both Friday and Saturday, with holidaymakers having to read departure times off whiteboards scattered around the airport. An airport spokesman said several systems were taken offline on Friday in a bid to ...

  • Government mass surveillance breached human rights, says European court

    September 13, 2018

    Mass surveillance and data collection programs used by the UK government breached privacy and don’t meet the necessary legal requirements to guarantee rights will be upheld, the European Court of Human Rights (ECHR) has ruled. The court has concluded that the UK’s mass interception programmes breached the European Convention on Human Rights. The case of ‘Big ...

  • Five Eyes governments get even tougher on encryption

    September 2, 2018

    “The governments of the United States, the United Kingdom, Canada, Australia, and New Zealand are committed to personal rights and privacy, and support the role of encryption in protecting those rights,” began a document agreed to last week. Sounds good. But wait. The government ministers who met on Australia’s Gold Coast last week went on to ...

  • UK MoD teams up with TechVets to train veterans in cyber security

    August 15, 2018

    The Ministry of Defence (MoD) has signed a partnership agreement with the not-for-profit start-up TechVets to help veterans get jobs in the cyber security and technology sector, TechVets, which specialises in helping veterans get jobs in the tech sector, will work with the MOD’s flagship training programme for service leavers, under a new agreement. The agreement will ...