Business leaders have received new guidance on strengthening their cyber defenses. The UK government, in collaboration with industry experts and the National Cyber Security Centre (NCSC), has published a draft code of practice on cyber security. The code emphasizes the need for companies to consider cyber threats as significant business risks, similar to financial or legal challenges. It specifically targets executive and non-executive directors.
According to the code, senior leaders should prioritize cyber security within their organizations. It recommends establishing clear roles and responsibilities across the company, enhancing protection for customers, and safeguarding the firm’s ability to operate securely. The NCSC has consistently highlighted the ongoing cyber threat to the UK, particularly from ransomware attacks. These attacks involve hackers gaining access to a user’s system, stealing or blocking data, and demanding a ransom for its release.
To address potential cyber incidents, the code suggests that firms should have detailed response and recovery plans in place. It also advises regular testing of these plans and the establishment of formal incident reporting systems. Additionally, the code encourages companies to enhance the cyber skills and awareness of their employees whenever possible.
Viscount Camrose, the government’s AI and intellectual property minister, emphasized that cyber attacks can be as detrimental to businesses as financial or legal issues. He believes that the new code will enable companies to navigate potential cyber threats effectively and fully leverage emerging technologies. Camrose called for industry professionals from all sectors to contribute their perspectives on improving cyber security across the economy.
The government is seeking feedback from businesses to further enhance the code. Lindy Cameron, who heads the NCSC, emphasized that cyber security is no longer solely the responsibility of IT departments. CEOs and directors must understand the risks and mitigate potential threats. Cameron urged senior leaders to share their views on the new cyber governance code of practice. She also highlighted the availability of the NCSC’s cyber security board toolkit, which offers practical guidance for implementing the code’s recommendations.
The government’s commitment to strengthening cyber defenses underscores the importance of proactive measures in today’s digital landscape.