We're still waiting for UK government to get strategic about cybersecurity

Government investment in cybersecurity is great, but what matters is where the money goes

The Queen has opened the new British National Cyber Security Centre (NCSC), and chief executive Ciaran Martin insisted it's the "perfect place to coordinate our cybersecurity and manage incidents across the UK".

He also said that "initiatives will disappoint" and "things will go wrong" which pretty much sums up the UK government's cybersecurity strategy thus far. Which you may think is an odd statement, given that Chancellor of the Exchequer, Philip Hammond MP, stated at the NCSC opening that it will cement our position as a "world leader in cybersecurity". This, frankly, is an odd statement.

Advertisement - Article continues below

Show us the money

Hammond also insisted that "Britain is transforming its capabilities in cyber defence and deterrence", which is good to know. Unfortunately, the government has been saying this for years but not actually doing much to any great effect.

Hammond's predecessor, George Osborne, was also good at talking about cybersecurity. In a 2015 speech announcing 1.9 billion of cybersecurity spending over five years, Osborne mentioned the word 'cyber' 134 times in 45 minutes. Given that there are only three years left of Osborne's original spending timeline, and the current government has made little by way of firm strategic commitments, it's worrying to say the least.

Advertisement
Advertisement - Article continues below

Show us the strategy

Forget 'world leader'; Parliament's Public Accounts Committee chair, Meg Hillier, said that Britain is ranked below Brazil, China and South Africa when it comes to securing smartphones and laptops. This is hardly surprising when the committee report says the government has "little oversight of the costs and performance of government information assurance projects and processes".

Advertisement - Article continues below

The big picture, the strategic problem, is that the government effectively does not have a consistent approach to security breaches and so is unable to make informed decisions when it comes to prioritising resources both financial and hands-on.

Addressing the skills shortage is a start

All that said, there are some promising moves coming from the government. These include initiatives such as GCHQ's CyberFirst programme, which offers the best graduates financial support through bursaries and employment placements which can help them get the hands-on experience needed to properly skill the UK cybersecurity sector.

Beyond that and the opening of the NCSC, the National Cyber Security Strategy (NCSS) seems to be treading water somewhat. It's asked security companies, two years on, to put forward ideas as to how the UK can become cyber secure. It's asking for submissions on such things as what threats we face (yes, seriously) and how the government can combat them (ditto).

Advertisement - Article continues below

Looking for leadership

Should we be that surprised at this apparent discordant response to the cybersecurity threat? If you look to the average enterprise and how cybersecurity is rarely a strategic, business process-led, boardroom level discussion, then the answer is: well no, not really.

That so many C-suite directors do not understand the threats they face when it comes to cyber attack, let alone how to approach defending the organisation, now is the time for the government to grasp the nettle and show some leadership. There are three years of the five-year strategy left, and time is fast running out for the UK government to finally decide what that strategy actually is...

Picture: Bigstock

Featured Resources

Preparing for long-term remote working after COVID-19

Learn how to safely and securely enable your remote workforce

Download now

Cloud vs on-premise storage: What’s right for you?

Key considerations driving document storage decisions for businesses

Download now

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Transforming productivity

Solutions that facilitate work at full speed

Download now
Advertisement
Advertisement

Recommended

Visit/security/ransomware/356292/university-of-california-gets-fleeced-by-hackers-for-114-million
ransomware

University of California gets fleeced by hackers for $1.14 million

30 Jun 2020
Visit/security/cyber-security/356289/australia-announces-135b-investment-in-cybersecurity
cyber security

Australia announces $1.35 billion investment in cyber security

30 Jun 2020
Visit/cloud/cloud-security/356288/csa-and-issa-form-cybersecurity-partnership
cloud security

CSA and ISSA form cyber security partnership

30 Jun 2020
Visit/business/policy-legislation/356215/senators-propose-a-bill-aimed-at-ending-warrant-proof-encryption
Policy & legislation

Senators propose a bill aimed at ending warrant-proof encryption

24 Jun 2020

Most Popular

Visit/mobile/google-android/356373/over-2-dozen-additional-android-apps-found-stealing-user-data
Google Android

Over two dozen Android apps found stealing user data

7 Jul 2020
Visit/laptops/29190/how-to-find-ram-speed-size-and-type
Laptops

How to find RAM speed, size and type

24 Jun 2020
Visit/cloud/356260/the-road-to-recovery
Sponsored

The road to recovery

30 Jun 2020