Connected tech cybersecurity standards
Gaps in cybersecurity regimes for connected technology, particularly regarding network, storage, and cloud security standards.
Strongest theme matches
Mixed across source types and ranked by classifier confidence plus text match strength.
Committee recommendation
100match
#13 - Require providers to adopt network, storage, and cloud security standards for connected tech.
Improving cybersecurity of consumer connected devices is an important and positive step, but the proliferation of connected tech in enterprise settings and the gap in the regime regarding network, storage and cloud security still present likely attack vectors that will continue to allow devices to be compromised. The Government should close the gaps for both consumer and enterprise...
Matched on
terms: connected, cybersecurity, standard, tech
Committee recommendation
87match
#14 - Recommend successor Committee examine 5G Supply Chain Diversification, international standards, and technology rollout.
Should our successor Committee wish to examine the UK’s telecommunications infrastructure and domestic capability, we recommend it considers: • The implementation of the 5G Supply Chain Diversification Strategy, and relevant policy and technical developments since the then Committee’s report; • Examining the Government’s participation in international standards bodies for critical and emerging technologies; or • The rollout and...
Matched on
terms: standard, tech
Committee recommendation
80match
#11 - Produce an implementation plan and commit to codifying remaining IoT security guidelines.
The introduction of the product security regime, which codifies three of the original thirteen guidelines set out in the Government’s internationally recognised 2018 Code of Practice for Consumer IoT Security, is an important first step in improving cybersecurity for connected devices. However, the remaining ten guidelines retain considerable support among stakeholders. We recommend that the Office for Product...
Matched on
terms: connected, cybersecurity, standard, tech
Committee recommendation
77match
#23 - Second Report - The Security of 5G
Global standards are key to 5G and future telecommunications networks. China has been very active in the standard setting bodies whilst the UK and allies have stood back. This is not satisfactory. The UK should take a leadership role in shaping global standards to ensure that the future of mobile networks, and global technology more widely, matches with...
Matched on
terms: standard, tech
Committee recommendation
73match
#2 - Second Report - The Security of 5G
We share the Government’s objective that the UK remains at the forefront of the 5G rollout as we move into the next technological era. It is imperative that the UK is amongst the first countries to benefit from the technological advances that 5G will bring. The Government’s ambitions for the rollout of 5G are laudable and cybersecurity policy...
Matched on
terms: cybersecurity, tech
Committee recommendation
73match
#14 - Second Report: 5G market diversification and wider lessons for critical and emerging technologies
The Government should align its strategy for diversifying the 5G vendor market with its support for rolling out 5G network coverage. Wherever the Government provides funds for expanding 5G coverage, it should look for opportunities to simultaneously support vendor diversification, for example by requiring the use of open standards. The Government should identify opportunities to support new market...
Matched on
terms: standard, tech
Committee recommendation
68match
#21 - Second Report - The Security of 5G
It is evident that the UK’s lack of industrial capacity in telecommunications is not unique, with China dominating the industry. In order to combat this dominance, we support the principle of proposals for forming a D10 alliance of democracies to provide alternatives to Chinese technology: however, it is not yet clear what the purpose of this alliance is....
Matched on
terms: standard, tech
Committee recommendation
68match
#18 - Nineteenth Report - Protecting consumers from unsafe products
The OPSS estimated that 15% of products bought for the home now include ‘smart’ technology. Products that are connected to the internet create new product safety risks, such as cyber-security risks in the example of a baby monitor which could be subject to hacking. The Department and OPSS recognised such risks, but also noted the opportunities presented by...
Matched on
terms: connected, tech
Committee recommendation
65match
#18 - Second Report: 5G market diversification and wider lessons for critical and emerging technologies
Of Ofcom’s two principal duties, it has appeared to have given less prominence to “further[ing] the interests of citizens in relation to communications matters” than it has to “further[ing] the interests of consumers”. Ofcom must ensure that it pursues both of its principal duties and guarantees the security of the UK’s telecommunications infrastructure as well as furthering the...
Matched on
terms: tech
Committee recommendation
62match
#26 - Balance digital trade and AI growth with strong protections for UK standards and industries.
Looking ahead, future commitments in the potential Economic Prosperity Deal must balance opportunities for growth in digital trade, AI, and services with strong protections for UK standards, tax sovereignty, and critical domestic industries. (Recommendation, Paragraph 141) 56
Matched on
terms: standard
PFD report
61match
Abdul Oryakhel
There is a lack of understanding regarding the dangers of e-bike/e-scooter lithium-ion batteries and chargers, coupled with an absence of British or European safety standards.
Matched on
terms: standard
Committee recommendation
61match
#20 - 1st Report – Raising the standard: licensing of taxis and private hire vehicles
We recommend that the government consult within the next 12 months on introducing mandatory in-vehicle CCTV, with a view to including this requirement within national standards if it is sufficiently supported by evidence. The consultation should also seek views on how data protection, privacy and storage concerns could be suitably addressed. (Recommendation, Paragraph 82)
Matched on
terms: standard
Committee recommendation
61match
#16 - Second Report - The Security of 5G
In the end, the Government decision was taken because of the technical considerations resulting from sanctions; however the Government should have considered the potential damage to key alliances enough of a risk to begin to remove Huawei from the UK’s 5G network before the US sanctions were imposed.
Matched on
terms: tech
Committee recommendation
61match
#15 - Second Report - The Security of 5G
The framing of the issue by the United States as a technical concern about the presence of Huawei in our networks has generated disagreement between the two Governments, given the contrasting conclusions of technical experts on either side of the Atlantic.
Matched on
terms: tech
Committee recommendation
61match
#2 - Second Report: 5G market diversification and wider lessons for critical and emerging technologies
The Government is seeking to attract existing vendors to the UK market in order to diversify the telecommunications vendor market in the short-term. One of the major barriers faced by such companies is the requirement of British network operators for continued provision of older generations of network technology. The main proposal in the Government’s diversification strategy to address...
Matched on
terms: tech
Committee recommendation
60match
#19 - Nineteenth Report - Protecting consumers from unsafe products
The regulatory system for product safety is facing multiple new challenges that it will need the skills and resources to be able to respond to. For example: the OPSS and Trading Standards services will need to give greater consideration to how they regulate safety risks arising from product software and changing technology; there are new regulatory 29 Q...
Matched on
terms: standard, tech
PFD report
57match
Mizanur Rahman
A lack of British or European safety standards for lithium-ion e-bike batteries and chargers allows unsafe products to be sold and mixed, causing fires, thermal runaway, and multiple deaths.
Matched on
terms: standard
PFD report
57match
Bobby Lee
A significant rise in fires from faulty e-bike/e-scooter lithium-ion batteries and unsuitable chargers, often from inferior conversion kits and unregulated online sales, highlights the lack of specific safety standards.
Matched on
terms: standard
Committee recommendation
56match
#11 - Second Report: 5G market diversification and wider lessons for critical and emerging technologies
In addition to conducting security testing and validation, the Government should ensure that the research and testing facilities established through the diversification strategy also drive market diversification by stimulating collaboration and supporting the development and commercialisation of new technologies. (Paragraph 49) 50 5G market diversification and wider lessons for critical and emerging technologies
Matched on
terms: tech
Committee recommendation
55match
#12 - Work with OPSS to promote data protection and security guidelines for IoT devices.
As the guidelines set out in the 2018 Code of Practice for Consumer IoT Security imply, cybersecurity and data protection are mutually reinforcing. Without cybersecurity, data cannot be meaningfully protected, while data protection can manage the risk and impact of cyberattack. The Information Commissioner’s Office, either bilaterally or through the Digital Regulation Co-operation Forum, which helps co-ordinate regulation...
Matched on
terms: cybersecurity, standard
Committee recommendation
53match
#21 - Strike balance in digital trade to promote AI while safeguarding UK sovereign capabilities.
Any future digital trade provisions negotiated under the Economic Prosperity Deal should strike a careful balance: promoting AI adoption and cross-border collaboration to strengthen the Western technological 55 alliance, while safeguarding intellectual property, ensuring fair taxation, and enabling the development of sovereign UK AI capabilities. (Recommendation, Paragraph 116)
Matched on
terms: tech
Committee recommendation
52match
#15 - Second Report: 5G market diversification and wider lessons for critical and emerging technologies
The Government identified the concentration of intellectual property rights in the hands of established vendors as a barrier to market entry. It commits in its diversification strategy to working with industry bodies to address this, although the proposed work is not described in great detail. In its response to this Report, the Government should provide more details on...
Matched on
terms: tech
Committee recommendation
52match
#21 - 1st Report - Subsea telecommunications cables: resilience and crisis preparedness
The Government should support the subsea cable industry in rolling out more extensive cable monitoring technology and should explore incentives to encourage such investment. This could include Government commitments to make better use of existing measures and data—for example more proactive identification and investigation of vessels switching off Automatic Identification Systems. We also encourage industry to engage closely...
Matched on
terms: tech
Committee recommendation
52match
#16 - Second Report: 5G market diversification and wider lessons for critical and emerging technologies
Long-standing factors have driven consolidation in the telecommunications vendor market over many years, so it is critical that the Government adopts measures to maintain market diversity as well as to drive the initial diversification. Network operators will be integral to achieving both aims. Although operators stand to benefit from a more diverse vendor market, it may not be...
Matched on
terms: tech
Committee recommendation
52match
#5 - Ensure suppliers prioritise replacing faulty smart meters and deploy future-proofed technology.
Too many smart meters are not fully functioning and millions more will be impacted when the 2G and 3G mobile communication networks close. In March 2023, around 3 million (9%) of smart meters were not working properly in total. Of these, 1.6 million are “transitory” issues according to the Department, but the remainder were faulty, and either not...
Matched on
terms: tech
Committee recommendation
51match
#17 - Fifth Report - Maritime 2050
The Government needs to act as a consolidator and facilitator to draw together disparate approaches to cybersecurity in the maritime sector. The 2017 Cyber Security Code of Practice for Ships should be updated as soon as possible. The Government should use its influence at the International Maritime Organization to set the agenda for minimum international cybersecurity standards.
Matched on
terms: cybersecurity, standard
Committee recommendation
49match
#19 - Second Report - The Security of 5G
Pressure has been exerted by China on the UK Government to retain the presence of Huawei in its 5G infrastructure through both covert and overt threats. More recently, following the Government’s announcement for the long-term withdrawal of Huawei from its 5G network, China has threatened to withdraw from the UK’s economy, including in critical infrastructure such as nuclear.
Matched on
classifier match
Committee recommendation
49match
#31 - HMRC acknowledges security concerns with third-party Making Tax Digital software, setting strict specifications.
We asked HMRC whether there were potential security concerns that could be posed by the third–party MTD software taxpayers use to submit their tax returns, including whether there were risks to HMRC’s own systems.63 In written evidence provided after our evidence session, HMRC told us it takes security very seriously. It said all data sent to HMRC systems...
Matched on
classifier match
Committee recommendation
48match
#6 - 7th Report - Transnational repression in the UK
However, we recognise the rapidly evolving nature of digital technologies and the increasing sophistication of methods used to conduct TNR. It is therefore essential that the legal framework remains agile and responsive to evolving threats. We recommend that the Government keeps relevant legislation under regular review to ensure it remains fit for purpose in addressing emerging threats, particularly...
Matched on
terms: tech
Committee recommendation
48match
#31 - Ensure government-provided education devices receive regular software updates for security and reduced e-waste
Since the pandemic, the Government has provided over 1.35 million laptops and tablets to schools, trusts, local authorities and further education providers for disadvantaged children and young people. Edtech has more malware than all other sectors combined, and therefore it is essential that these devices receive software updates and renewals regularly in order to keep them secure for...
Matched on
terms: tech
Committee recommendation
48match
#12 - Second Report: 5G market diversification and wider lessons for critical and emerging technologies
Testing facilities do not need to be situated in one physical location. The Government should ensure that any new testing facilities complement existing facilities, and are designed with potential developments in 5G technology in mind to guard against future redundancy.
Matched on
terms: tech
Committee recommendation
48match
#7 - Connected vehicles pose new complex challenges for safety, data access, and legal liability.
Connected vehicles pose new dangers, which the law must evolve to meet. A safety- led culture will require wide access to data, and this must be a higher priority than commercial confidentiality. Ensuring self-driving vehicles are roadworthy will be more complicated than for conventional vehicles, not least because there is more that can go wrong. Legal liability also...
Matched on
terms: connected
Committee recommendation
47match
#14 - Nineteenth Report - Protecting consumers from unsafe products
Responding to the key challenges the regulatory system faces requires collaboration with other government departments. For example, the Department told us of its engagement with the Department for Digital, Culture, Media and Sport regarding cyber- security threats in products that contain software. It also noted that it is working with the Ministry of Housing, Communities and Local Government...
Matched on
terms: standard
Committee recommendation
45match
#27 - Second Report - The Security of 5G
The UK market for vendors is far from satisfactory. Whilst this reflects a wider consolidated ecosystem of global 5G vendors action must now be taken to ensure that 5G is in a more secure position in the years to come.
Matched on
classifier match
Committee recommendation
45match
#24 - HMRC’s legacy IT systems pose security, reliability, and cost risks.
HMRC explained that there are three key risks that arise from operating legacy systems: lower levels of security; lower reliability and resilience; and higher costs of system changes. HMRC said that its executive team and its digital team track how up to date its systems are and how that is changing over time. HMRC told us that it...
Matched on
classifier match
IMB recommendation
45match
Long Lartin (2023)
Security. The current unreliable and faulty security systems pose a serious safety risk. Is high priority to be given to enable repairs and improvements?
Matched on
classifier match
Committee recommendation
44match
#26 - Second Report - The Security of 5G
Despite being a longer timeframe than some have called for, the Government’s most recent restrictions on the use of Huawei in 5G networks will delay the 5G rollout and economically damage the UK and mobile network operators. The UK Government should take necessary steps to minimise the delay and economic damage. The Government should consider providing compensation to...
Matched on
classifier match
IMB annual report
43match
Kirkham (2022)
HMP Kirkham, a Category D open prison, maintained a population of 470 against a capacity of 699 during 2022. The Board reported low levels of violence and no deaths in custody, commending staff efforts to re-establish a workable regime post-Covid. Key concerns included the persistent transfer of unsuitable prisoners, the urgent need for CCTV and in-cell technology upgrades,...
Matched on
terms: tech
Committee recommendation
41match
#36 - HMRC acknowledges legacy IT systems and poor data management hinder AI adoption and increase cyber risks.
We asked HMRC whether the age of some of its IT systems were going to make it more difficult to adopt AI. HMRC agreed and considers the “critical thing with AI is making sure you really have a handle on where your data is and that you are managing your data well.” 72 We also asked HMRC about...
Matched on
classifier match
Committee recommendation
41match
#26 - Prioritise introducing secure digital channels for customers to submit files and messages.
Last year HMRC acknowledged that is behind many other organisations in enabling customers to communicate securely through digital channels. In 2022–23, approximately 70% of the 22 million items of correspondence HMRC received came in through the post. In January 2025 we therefore recommended that as part of its digital roadmap HMRC should prioritise introducing systems for customers to...
Matched on
classifier match
Committee recommendation
40match
#16 - 1st Report - Subsea telecommunications cables: resilience and crisis preparedness
Emergency services should ensure their business continuity plans highlight any areas of critical reliance on foreign internet servers, and account for temporary internet disruption in the event of a security crisis. (Recommendation, Paragraph 100) Legal Responses
Matched on
classifier match
Committee recommendation
40match
#6 - 1st Report - Subsea telecommunications cables: resilience and crisis preparedness
The National Protective Security Authority (NPSA) and National Cyber Security Centre should require all UK landing stations to be target-hardened to sufficient levels to deter state-backed sabotage. They should require landing station operators to develop within 12 months an emergency ‘good enough’ repair plan to recover from co-ordinated attacks. The NPSA should also conduct a similar exercise with...
Matched on
classifier match
Committee recommendation
40match
#24 - Second Report - The Security of 5G
The Government has faced pressure to remove Huawei more quickly than by 2027. The evidence we have received would suggest that a quicker timescale could result in signal blackouts, delay the 5G rollout significantly and cost both operators and the economy greatly. For the time being we consider the plan for a removal by 2027 to be a...
Matched on
classifier match
Committee recommendation
40match
#18 - Second Report - The Security of 5G
Concern about Huawei is therefore based on clear evidence of collusion between the company and the Chinese Communist Party apparatus. It is important that the West does not succumb to ill-informed anti-China hysteria and recognises the mutual benefits of Chinese involvement in our economy. The UK, and allies, should ensure that decisions taken around the involvement of Chinese...
Matched on
classifier match
Committee recommendation
39match
#18 - 12th Report – Menstrual health of girls and young women
The Government should set out in the renewed Women’s Health Strategy a rigorous approach to tackling the risks from ineffective, unsafe and exploitative for-profit FemTech apps. To combat demand for these apps the Government must increase resourcing of the NHS’s Innovation, Research and Life Sciences team, to drive forward NHS provision of digital tools. The strategy should set...
Matched on
terms: tech
Committee recommendation
39match
#19 - One point four million smart meters lost communication; replacement incentives for suppliers are weak.
According to the Department and Energy UK, the third category included around 1.4 million meters that were working at the point of installation but had since lost communication.59 This includes first generation meters, known as SMETS1, that needed to be ‘enrolled’ (in effect, connected) to the central data and communication platform infrastructure to continue functioning when consumers switch...
Matched on
terms: connected
Committee recommendation
36match
#28 - 1st Report - Subsea telecommunications cables: resilience and crisis preparedness
The Government should further explore cable protection zones for critical areas of cable concentration, policed by early warning indicators and heightened monitoring and response capabilities. This would require close co-operation with European partners, given the need to manage other maritime activities proportionately. (Recommendation, Paragraph 169) 67
Matched on
classifier match
Committee recommendation
36match
#5 - 1st Report - Subsea telecommunications cables: resilience and crisis preparedness
Many cable landing stations are vulnerable to attack. The Government and operators must take the risk of state-backed sabotage seriously, including against targets in Europe. (Conclusion, Paragraph 47)
Matched on
classifier match
Committee recommendation
36match
#4 - 1st Report - Subsea telecommunications cables: resilience and crisis preparedness
The Government should update its public and private risk scenarios to cover extensive co-ordinated sabotage to subsea and terrestrial internet infrastructure, including onward connections to Europe. (Recommendation, Paragraph 39) System vulnerabilities
Matched on
classifier match
Committee recommendation
35match
#14 - Fifth Report - Maritime 2050
There is a fine balance that needs to be struck when it comes to regulating for smart shipping and autonomous vessels. It is important that innovation is able to flourish whilst ensuring that safety standards are maintained and that there is a measure of certainty to guide investment. Leadership and coordination—of the kind promised by the proposed Centre...
Matched on
terms: standard