UK government exempting itself from flagship cyber law inspires little confidence


From May’s cyberattack on the Legal Aid Agency to the Foreign Office breach months later, cyber incidents have become increasingly common in UK government.

The scale extends far beyond these high-profile cases: the NCSC reports that 40 percent of attacks it managed between September 2020 and August 2021 targeted the public sector, a figure expected to grow. Given this threat landscape, why does the UK’s flagship Cyber Security and Resilience (CSR) Bill exclude both central and local government?

Read more…
Source: The Register News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • UK police spend over £1m on cybersecurity training

    March 20, 2018

    The UK’s police forces have spent more than £1.3 million in the last three years training its staff on cybersecurity issues. The figures, contained in a new report released by the Parliament Street Think Tank, show that almost 40,000 staff have taken part in the training. North Wales Police lead the way when it came to the amount ...

  • National Lottery: 10 million players told to change passwords as attackers hit online accounts

    March 19, 2018

    Millions of National Lottery players have been urged to change their passwords following what parent company Camelot describes as “suspicious activity” involving lottery accounts. Camelot, which runs the National Lottery, insists there’s been no access to core systems or databases that would affect lottery draws or prizes, but has recommended that its 10.5 million registered users ...

  • Cybersecurity and Brexit: What does it mean for the fight against hackers?

    March 8, 2018

    Brexit means Brexit, according to the prime minister, but with little more than a year until 29 March 2019 — the date the UK is due to depart the European Union — there are still many questions to be answered for cybersecurity professionals. One thing that is certain is that the upcoming General Data Protection Regulation (GDPR) ...

  • Government set to position UK as leader in cyber amid rise in attacks

    March 8, 2018

    The government wants to position the UK as a global leader in cybersecurity and make it one of the safest countries to do business. These aims were set out in its Cyber Security Export Strategy; a five year plan for the Government to protect businesses and people, deter attackers and develop security skills. The report reads: “Our ...

  • UK Government To Seek Post-Brexit EU Data Protection Agreement

    March 5, 2018

    Tech firms said they welcome the government’s latest data protection plans, which could see an ongoing EU-level role for Britain’s information commissioner UK technology ndmpanies have welcomed a commitment by the government to seek a broader role for Britain in the ongoing development of European data protection policy after exit from the European Union, as laid out in ...

  • UK local gov: 37 cyber attacks a minute but little mandatory training

    February 20, 2018

    Britain’s local governments were hit by almost 100 million cyber attacks in the last five years, while one in four councils’ systems were successfully breached, according to research. Privacy campaign group Big Brother Watch sent Freedom of Information to all the UK’s local authorities, asking for details of cyber attacks and data breaches from 2013-17. Read more… Source: ...