Source · Select Committees · National Security Strategy (Joint Committee)
Recommendation 5
5
Paragraph: 49
Unlike many areas of national resilience, the Government has imposed cyber resilience requirements on most...
Recommendation
Unlike many areas of national resilience, the Government has imposed cyber resilience requirements on most CNI operators through the 2018 Network and Information System (NIS) regulations, and has also committed to imposing new 62 A hostage to fortune: ransomware and UK national security cyber resilience standards on CNI by 2025. There are significant issues with the implementation and oversight of the existing regulations, however, linked to a lack of regulator capability and cyber skills. Plans to extend the NIS regulations to CNI supply chains need to be accompanied by further work to ensure that they can be implemented effectively. The Government must scope the feasibility of establishing a cross-sector regulator on CNI cyber resilience to oversee the implementation of the NIS regulations, and to make recommendations for investment and legislative reform. The Government should report back to us on the outcome of this scoping work by March 2024.
Paragraph Reference:
49
Government Response
A response document is linked to this report, dated 11 March 2024. Response attribution to this recommendation has not been verified. Read the response document ↗