The UK Government has announced plans to enforce stricter cyber security standards on more organisations in order to enhance the security of the country’s infrastructure.
The upcoming Cyber Security and Resilience Bill will require firms providing essential IT services to public services and the wider economy to enhance their data protection and network security measures. They will also be mandated to conduct a wider range of risk assessments to identify potential threats.
Recent data from the National Cyber Security Centre (NCSC) revealed that in the year leading up to September 2024, the organisation handled 430 cyber incidents, including 89 classified as nationally significant. Additionally, half of British businesses reported experiencing a cyber breach or attack in the past year.
The proposed legislation will grant regulators increased authority to push for cyber security improvements in their respective areas. The Technology Secretary will also be empowered to update regulatory frameworks as new threats emerge, allowing firms to stay ahead of the evolving landscape of the sector.
Furthermore, the government is considering implementing new protections for over 200 data centres, which have become crucial components of the UK’s infrastructure network due to their role in processing large amounts of data necessary for AI tools.
Ministers emphasized that these changes will immediately bolster the defenses of energy suppliers and hospitals, which have increasingly been targeted by state-backed cyber attacks.
Technology Secretary Peter Kyle highlighted the economic benefits of enhancing resilience, stating, “Economic growth is the cornerstone of our plan for change, and ensuring the security of the vital services which will deliver that growth is non-negotiable.”
PA MediaHealth and Social Care Secretary Wes Streeting echoed the importance of fortifying cyber defenses, stating, “Cyber attacks are becoming increasingly sophisticated and create real risks for our health service if we do not act now to put the right protections in place.”
The government highlighted that cyber incidents have cost the UK economy approximately £22 billion annually between 2015 and 2019.
Richard Horne, CEO of the NCSC, described the Cyber Security and Resilience Bill as a “landmark moment” that will enhance the cyber defenses of critical services such as water, power, and healthcare.
“By bolstering their cyber defenses and engaging with the NCSC’s guidance and tools, organizations of all sizes will be better prepared to meet the increasingly sophisticated challenges,” Horne added.