Recommendation 22

The Department assured us that it was now working closely with the organisations on how it can provide central advice on improving cyber-resilience and minimising the threat and impact of cyber-attacks. It highlighted the Government’s cyber action plan, which the Department for Science, Innovation and Technology published earlier this year, which it said was setting out a path to greater resilience across public bodies by 2030. The Department told us it was working with the museums and galleries on how it can address skills shortages and create “artefacts” that can be used and shared across its arm’s-length bodies to address their differing cyber-security needs.49 It is also bringing together chief digital information officers and chief information security officers from its arm’s-length bodies, including the museums and galleries, in new forums, to work together, share their experiences and set the agenda on what the Department and these bodies should be working on collectively. The Department had set aside a small amount of money within its own budget for this year to help this.50