New blueprint published to protect UK from cyber threats

Today (Wednesday 15th December) the Government has published its new National Cyber Strategy which sets out how the UK will solidify its position as a global cyber power. This is the first major milestone following the publication of the Government’s Integrated Review earlier this year.

The strategy builds on the significant progress made on cyber over the last five years which has seen the UK cyber security sector grow rapidly, with over 1,400 businesses generating revenues of £8.9 billion last year, supporting 46,700 skilled jobs, and attracting significant overseas investment. 

Through the strategy, the Government is calling on all parts of society to play their part in reinforcing the UK’s economic and strategic strengths in cyberspace - this means more diversity in the workforce, levelling up the cyber sector across all UK regions, expanding our offensive and defensive cyber capabilities and prioritising cyber security in the workplace, boardrooms and digital supply chains.

Steve Barclay, the Chancellor of the Duchy of Lancaster, said:

“The new National Cyber Strategy transforms how the UK will advance its national interests in cyberspace and is a major milestone following the publication of the Integrated Review earlier this year. 

“It sets out a clear vision for building cyber expertise in all parts of the country, strengthening our offensive and defensive capabilities and ensuring the whole of society plays its part in the UK’s cyber future, and comes with record funding to match.”

The Government is announcing a new “Cyber Explorers” online training platform which will teach young people cyber skills in classrooms, and is taking steps to improve diversity in the cyber workforce through a new adult scheme which will ensure that people from all backgrounds have access to these high skill, high priority jobs.  In addition, a new “Royal Charter” for the UK Cyber Security Council has been approved by the Queen, which will help improve cyber careers and bring the cyber workforce into line with other professional occupations like engineering.

To promote growth and innovation in the UK cyber industry the Government is investing in the Cyber Runway scheme which is helping 107 innovators grow and develop their businesses, with the majority of member companies outside of London and the South East, 45% led by women and 52% run by founders from black and minority ethnic groups.

Funding for these growth and skills programmes will be reoriented away from large, often London-based initiatives to a regionally delivered model which will mean more jobs and better opportunities for people across the UK. 

Minister for Media, Data and Digital Infrastructure, Julia Lopez, said:

“This ground-breaking strategy will help secure the UK’s position as a leading cyber power and ensure people right across the country have the knowledge and skills they need to stay safe online.

"It's great news that the UK Cyber Security Council's Royal Charter application has been approved and we will continue to work closely with the sector to inspire the next generation to consider a career in cyber."

The strategy also sets out the Government’s plan to keep citizens safe in cyberspace and stamp out cyber crime by:

• Bolstering law enforcement with significant funding so that they can ramp up their targeting of criminals;

• Increasing investment in the National Cyber Force which represents the UK’s offensive capability to counter, disrupt, degrade and contest those who would do harm to the UK and its allies; 

• Expanding GCHQ’s National Cyber Security Centre’s research capabilities, including the new applied research hub in Manchester; 

• Implementing the Product Security and Telecommunications Infrastructure Bill to enforce minimum security standards in all new consumer smart products; and

• Investing in public sector cyber security to ensure that key public services remain resilient to evolving threats and can continue to deliver for citizens who need them.

Priti Patel, the Home Secretary, said:

“Cybercrime ruins lives and facilitates further crimes such as fraud, stalking, and domestic abuse. Billions of pounds are lost each year to cybercriminals who steal or hold personal data to ransom and who disrupt key public services or vital sectors of the national economy.  

“This strategy will significantly improve the Government’s response to the ever-changing threat from cybercrime and strengthen law enforcement’s response in partnership with NCSC and the National Cyber Force. We all have a part to play in protecting ourselves from cybercrime. It is important that as a society, we take this threat seriously.”

Commander of Strategic Commander General Patrick Sanders said:

“This strategy builds upon the importance of the cyber domain as outlined in the Integrated Review and sets out a clear vision for how we as a nation will contribute to the UK’s cyber future.

“As we continue to face threats in cyberspace, it is essential that we continue to adapt, innovate, partner and succeed against evolving aggressive activity.”

Sir Jeremy Fleming, Director GCHQ said:

“The National Cyber Strategy builds on the country’s strong foundations in cyber security that GCHQ’s work has been part of, particularly through the NCSC. But it goes beyond that. It brings together the full range of cyber activities, from skills to communities, and to the use of offensive cyber capabilities through the newly established National Cyber Force.

“It shows how the UK can build capacity across the country to continue to prosper from the opportunities of cyberspace. And, as a leading responsible cyber power, can build alliances with democratic partners around the world to protect a free, open and peaceful cyberspace.”

The strategy recognises the vital role of the private sector in ensuring the UK’s cyber future through the establishment of the new National Cyber Advisory Board (NCAB) which will bring together senior leaders from the private and third sectors to challenge, support and inform the Government’s approach to cyber. 

This new body comes alongside the creation of a National Laboratory for Operational Technology Security which will bring Government, industry and academia together to make sure that the UK economy is built on the highest level of cyber resilience. 

Further support will also be made available to help regional firms to become world class exporters including through a new online “Export Faculty” Hub for SMEs in the defence and security sector.

All of these plans are supported by the £2.6 billion investment in cyber announced in this year’s Spending Review. 

ENDS

Pillars and Objectives

Pillar 1 - Strengthening the UK cyber ecosystem

• Strengthen the structures, partnerships and networks necessary to support a whole-of-society approach to cyber.

• Enhance and expand the nation’s cyber skills at every level, including through a world class and diverse cyber profession that inspires and equips future talent.

• Foster the growth of a sustainable, innovative and internationally competitive cyber and information security sector, delivering quality products and services, which meet the needs of government and the wider economy.

Pillar 2 - Building a resilient and prosperous digital UK

• Improve the understanding of cyber risk to drive more effective action on cyber security and resilience.

• Prevent and resist cyber attacks more effectively by improving management of cyber risk within UK organisations, and providing greater protection to citizens.

• Strengthen resilience at national and organisational level to prepare for, respond to and recover from cyber attacks.

Pillar 3 - Taking the lead in the technologies vital to cyber power

• Improve our ability to anticipate, assess and act on the science and technology developments most vital to our cyber power.

• Foster and sustain sovereign and allied advantage in the security of technologies critical to cyberspace.

• Preserve a robust and resilient national Crypt-Key enterprise which meets the needs of HMG customers, our partners and allies, and has appropriately mitigated our most significant risks including the threat from our most capable of adversaries.

• Secure the next generation of connected technologies and infrastructure, mitigating the cyber security risks of dependence on global markets and ensuring UK users have access to trustworthy and diverse supply.

• Work with the multistakeholder community to shape the development of global digital technical standards in the priority areas that matter most for upholding our democratic values, ensuring our cyber security, and advancing UK strategic advantage through science and technology.

Pillar 4 - Advancing UK global leadership and influence

• Strengthen the cyber security and resilience of international partners and increase collective action to disrupt and deter adversaries.

• Shape global governance to promote a free, open, peaceful and secure cyberspace.

• Leverage and export UK cyber capabilities and expertise to boost our strategic advantage and promote our broader foreign policy and prosperity interests.

Pillar 5 - Detecting, disrupting and deterring adversaries

• Detect, investigate and share information on state, criminal and other malicious cyber actors and activities in order to protect the UK, its interests and its citizens.

• Take action in and through cyberspace to support our national security and the prevention and detection of serious crime.