will be making a keynote
speech at the Cyber UK Conference in Belfast tomorrow. Focusing
on the growing threat of ideologically driven cyber adversaries
and Government plans to strengthen business and critical
infrastructure operators' resilience.
Emerging Wagner-like cyber
groups are attempting to cause maximum damage to the UK’s
critical national infrastructure, the Chancellor of the Duchy of
Lancaster will warn in a major speech
today at the CyberUK conference in Belfast - as he confirms that
the National Cyber Security Centre is issuing an official threat
notice to operators to help protect the country.
Mr Dowden will also unveil a series of measures that will
encourage certain businesses “on the front line of our cyber
defences” to strengthen their security and boost the
economy.
In the last few months, several Russian-aligned groups have
turned their focus towards the UK with the primary motive "to
disrupt or destroy”, Mr Dowden will say. “These adversaries are
ideologically motivated, rather than financially motivated,” he
will add, and are less likely to show the same level of restraint
as national actors - making the situation “particularly
concerning.”
“Disclosing this threat is not something we do lightly,” Mr
Dowden will say. “But we believe it is necessary…if we want these
companies to understand the current risk they face, and take
action to defend themselves and the country.”
Mr Dowden, who will issue a “call to arms” to businesses to
strengthen their security, is also expected to introduce measures
to bolster the Government’s ability to hold operators of critical
infrastructure to account, including:
-
Setting “specific and ambitious cyber resilience targets” for
all critical national infrastructure sectors to meet by 2025
-
Actively working on plans to bring all private sector
businesses working in critical national infrastructure within
the scope of cyber resilience regulations.
“These are the companies in charge of keeping our country
running. Of keeping the lights on,” Dowden will say. “Our shared
prosperity depends on them taking their own security
seriously.
“A bricks-and-mortar business wouldn’t survive if it left the
back door open to criminals every night. Equally in today’s
world, businesses can’t afford…to leave their digital back door
open to cyber crooks and hackers.”
But Mr Dowden - who is also now Secretary of State for National
Investment Security - will also highlight the huge opportunities
for businesses who strengthen their defences and the UK's
world-class cybersecurity - citing our National Cyber Strategy,
new cyber sanctions regime, and National Cyber Force.
“The safer we make our businesses, the safer we make our economy
- and the more attractive we become as a destination for
entrepreneurs,” he will say, adding: “The fact that the UK has in
the last few years taken cybersecurity so seriously already makes
us one of the best places in the world to invest.”
Mr Dowden will also argue that “the government needs to break
through its own glass ceiling” when it comes to attracting the
best cyber talent into government. He is expected to
announce that he is looking at what more can be done to improve
salaries for cyber security experts in the civil service. “These
are people protecting the systems and public services that
millions of people across the country rely on every day, so we
should want the very best people in charge of them. We must be
competitive to stay ahead”.
Mr Dowden will also today announce new and enhanced cyber
security measures to protect the UK Government’s critical IT
systems.
The measures, known as GovAssure, will increase the UK’s cyber
resilience and protect the government’s essential IT functions
from ever growing threats. Under the new rules, all central
government departments will have their cyber health reviewed
annually through new, more robust criteria.
GovAssure will be run by the Cabinet Office’s Government Security
Group (GSG), with input from the National Cyber Security Centre
(NCSC).
Notes
-
will be speaking at
CyberUK at the ICC in Belfast on Wednesday. The conference is
the Government’s flagship cyber security event.
-
The Government's National Cyber Strategy is backed by £22
billion committed to be spent on research and development in
cyber, and the NCSC has worked extensively with businesses of
all sizes through its Cyber Aware campaign to help build
their resilience.
-
The UK already ranks in the top four "Most Comprehensive
Cyber Powers" according to the Harvard Belfer National Cyber
Power Index 2022, and second in the International
Telecommunication Union’s Global Cyber Security Index.
