

Business leaders have received new advice on strengthening their cyber defenses.
The Government is urging companies to consider cyber threats as significant business risks, similar to financial or legal challenges. The draft code of practice on cyber security has been released in collaboration with industry experts and the UK’s National Cyber Security Centre (NCSC). It is specifically targeted at executive and non-executive directors.
The code advises senior leaders to prioritize cyber security within their businesses. It recommends establishing clear roles and responsibilities across the organization, enhancing customer protection, and ensuring safe and secure operations. The NCSC has consistently emphasized the ongoing cyber threat to the UK, particularly from ransomware attacks.
Ransomware attacks involve hackers gaining access to a user’s system, either stealing or blocking access to data, and demanding a ransom payment for its release. The new code suggests that companies should have detailed plans in place to effectively respond to and recover from potential cyber incidents. It also recommends regular testing of these plans and the implementation of formal incident reporting systems.
The code also encourages companies to enhance the cyber skills and awareness of their employees whenever possible. Viscount Camrose, the government’s AI and intellectual property minister, has cautioned that cyber attacks can be as damaging to businesses as financial or legal issues.
He stated: “This new code will assist them in taking the lead in safely navigating potential cyber threats, ensuring that businesses across the country can fully benefit from the emerging technologies that are revolutionizing our work. It is crucial that those at the forefront of this issue take the initiative in shaping how we can enhance cyber security in every sector of our economy. Therefore, we encourage industry professionals and business leaders from all backgrounds to come forward and share their views.”
The Government seeks feedback from businesses to further improve this new code. Lindy Cameron, who heads the NCSC, added: “Cyber security is no longer a niche subject or solely the responsibility of the IT department. It is essential for CEOs and directors to understand the risks to their organizations and how to mitigate potential threats.”
She urges all top executives to voice their opinions: “This new cyber governance code of practice will ensure that cyber resilience becomes a top priority for organizations. I encourage all directors, non-executive directors, and senior leaders to share their views. Senior leaders can also access the NCSC’s cyber security board toolkit, which provides practical guidance on implementing the actions outlined in the code to effectively manage cyber risks.”
* An AI tool was used to add an extra layer to the editing process for this story. You can report any errors to webhomepage@mirror.co.uk