The UK Government has announced plans to enforce stricter cyber security standards on more organisations in order to enhance the security of the country’s infrastructure.
As part of the upcoming Cyber Security and Resilience Bill, firms providing essential IT services to public services and the wider economy will be legally required to enhance their data protection and network security measures. They will also need to conduct a wider range of risk assessments to identify potential threats.
Recent data from the National Cyber Security Centre (NCSC) revealed that the organization dealt with 430 cyber incidents in the year leading up to September 2024, with 89 of them classified as nationally significant. Additionally, half of British businesses reported experiencing a cyber breach or attack within the past year.
The proposed legislation will grant regulators increased authority to drive improvements in cyber security within their respective areas. The Technology Secretary will also have the power to update regulatory frameworks as new threats emerge, enabling firms to stay ahead in the ever-evolving landscape of the sector.
Furthermore, new protections are being considered for over 200 data centres, which play a crucial role in the UK’s infrastructure by processing large amounts of data necessary for AI tools.
Ministers emphasized that these changes will immediately strengthen the defenses of energy suppliers and hospitals, which have increasingly become targets for state-backed cyber attacks.
Technology Secretary Peter Kyle highlighted that enhancing resilience will not only bolster security but also contribute to economic growth. He stated, “Economic growth is the cornerstone of our plan for change, and ensuring the security of the vital services which will deliver that growth is non-negotiable.”
Health and Social Care Secretary Wes Streeting emphasized the importance of protecting the NHS against sophisticated cyber threats, stating that the Bill will enhance the NHS’s resilience, secure patient data, and ensure critical appointments are not missed.
The Government estimated that cyber incidents cost the UK economy approximately £22 billion annually between 2015 and 2019.
Richard Horne, CEO of the NCSC, described the Bill as a “landmark moment” that will enhance the cyber defenses of critical services such as water, power, and healthcare. He emphasized the importance of organizations engaging with NCSC guidance and tools to better prepare for evolving challenges.
The Government aims to make the UK’s digital economy one of the most secure in the world through the Cyber Security and Resilience Bill, prioritizing the protection of services, supply chains, and citizens.