‘Crumbling' Government cyber defences outpaced by cyber criminals
The Public Accounts Committee (PAC) said hostile states and criminals have developed the ability to severely disrupt public services and critical national infrastructure faster than the Government expected.
According to Government estimates, vulnerable 'legacy' IT systems make up 28% of all public sector IT, and the PAC report said the Cabinet Office had acknowledged that there was now a significant gap between the cyber threat and the Government's response to it.
The report comes in the wake of high-profile cyber attacks on UK retailers, including Marks and Spencer and Co-op, incidents which Chancellor of the Duchy of Lancaster Pat McFadden said should be a 'wake-up call' for British businesses, as he announced a new £16 million package to boost cyber defences during a cyber security conference earlier this week.
In its report conclusions, the PAC also said there was a shortage in Government of technical cyber skills and experience, cyber security had not been prioritised as a key issue, gaps remained in the Government's understanding of how resilient public sector IT systems were to attack, and that existing supply chains were complicated to properly secure.
It called on the Cabinet Office to carry out a major audit of IT systems and report back with details on how it plans to fix the range of issues raised.
Sir Geoffrey Clifton-Brown, chairman of the committee, said: 'Government departments are beginning to wake up to the serious cyber threat they face.
'It is positive to see independent verification now in place to gain a better picture on critical systems resilience.
'Unfortunately, this has only served to confirm that our battlements are crumbling.
'A serious cyber attack is not some abstract event taking place in the digital sphere.
'The British Library cyber attack is a prime example of the long-lasting cost and disruption that these events can cause.
'Hostile states and criminals have the ability to do serious and lasting harm to our nation and people's lives.
'If the Government is to meet its own ambition to harden resilience in the wider public sector, a fundamental step change will be required.
'This will involve infusing every top team with the required digital expertise, with cyber and digital specialists at the top level of every department, both management and boards to bring about a change in thinking throughout the Civil Service for greater threat awareness and digital transformation.
'Part of this will be Government finally grasping the nettle on offering competitive salaries for digital professionals, and we were encouraged to hear the Cabinet Office thinking in these terms.
'For too long, Whitehall has been unwilling to offer attractive remuneration for experts who are able to secure high-paid work elsewhere.
'Making sure that the right people are in the right jobs to defend the UK against this serious threat, and reducing the use of expensive contractors at the same time, is clearly sound value for money.
'This is an issue our committee will continue to scrutinise closely.
'It must not take a devastating attack on a critical piece of the country's infrastructure for defensive action to be taken.'
A Government spokesperson said: 'Just this week, we announced action to boost our country's cyber security, helping to grow the economy and create jobs through the Plan for Change. This includes backing for the rollout of cutting-edge CHERI technology which could prevent up to 70% of the most common cyber attacks.
'Last month we also unveiled details of our Cyber Security and Resilience Bill which will be introduced to Parliament later this year, ensuring our critical national infrastructure and digital economy are better protected and less vulnerable to attack.'
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
15 minutes ago
- Yahoo
Off-duty officers in Pride event told not to wear items linking them to police
Off-duty Northumbria Police officers who choose to take part in a Pride event this weekend have been told they must not wear clothing linking them to the force. The decision by Northumbria Police comes after a court ruled that the force acted unlawfully by allowing its officers to take part in a Pride event last year. High Court judge Mr Justice Linden said his ruling on Wednesday related only to the 2024 event and that it was up to the force to decide how it approaches Saturday's parade. Northumbria Police has now confirmed uniformed officers will not be permitted to take part and said any of those who are off-duty and do participate must not visibly identify themselves as being officers or members of the force through clothing, flags, or accessories. In an update on Friday, the force also said any participating off-duty officers must not 'express support for political aims (e.g. changes to law or policy) or opposition to other lawful views'. On-duty attendance 'is only permitted where it forms part of the official policing response', the force said. In a statement it said the approach was 'designed to maintain public confidence in our impartiality, while also respecting our employees' individual rights under the European Convention on Human Rights'. It added: 'This guidance is not about limiting personal expression, but about ensuring that when our people represent Northumbria Police, they do so in a way that is fair, balanced, and impartial to all communities.' Lindsey Smith, who describes herself as a 'gender critical' lesbian, took legal action against Northumbria Police over its decision to allow officers to participate in the Newcastle Pride in the City event last July, in which she also participated. Lawyers for Ms Smith told the High Court that the officers' involvement breached impartiality rules, and that the decision to allow them to take part was unlawful, although barristers for the force opposed the challenge, claiming the decision, made by Chief Constable Vanessa Jardine, was within her 'discretion'. In his judgment, Mr Justice Linden said Ms Smith is opposed to 'gender ideology', which she believes is 'wrong and dangerous' but has been 'embraced' by the organisers of the event, Northern Pride. While Ms Smith agreed that the event should be policed, she objected to officers 'associating themselves with the views of supporters of gender ideology and transgender activists by actively participating', the judge said. Last year's event saw uniformed officers march with some carrying flags which included Pride colours alongside police insignia, and others wearing uniforms with the word 'Police' in Pride colours. There was also a 'static display' staffed by uniformed officers, which displayed a Progressive Pride flag, which includes representation of transgender and non-binary people, people of marginalised ethnicities and those living with Aids, the judge said. A police van with the colours of the transgender Pride flag painted on its sides was also present, the court was told. Northumbria Police said it will have a community engagement display at Northern Pride this weekend, adding that it believed a complete withdrawal of police engagement from such events 'would be a retrograde step and damage trust and confidence amongst members of LGBTQ+ community'. The force added: 'We want to ensure everyone knows that we are absolutely here for them when they need us.' The LGB Alliance charity called on the rest of the UK's police forces to follow suit on the withdrawal of uniformed officers from such events and to put in place measures around the participation of off-duty officers. The charity's chief executive Kate Barker said: 'Since our founding, LGB Alliance has been working with police and crime commissioners to raise our supporters' concerns about partisan policing that favours gender activists over LGB people. 'We will continue this work until the UK's remaining 42 forces follow the lead of their colleagues in Northumbria, and stop endorsing a movement they do not understand.'
Yahoo
15 minutes ago
- Yahoo
Essex Police aware of video which appears to show vehicle drive into protester
Police have confirmed a video which appeared to show a police vehicle drive into a protester in Essex has been reported to them. It comes after violent clashes outside the Bell Hotel in Epping, which is believed to house asylum seekers, in recent days. On Thursday night, eight officers were injured during altercations between protesters and police with those hurt sustaining injuries to their hands as well as cuts and grazes. A video circulating on social media on Thursday evening appeared to show a police vehicle as it drove towards a number of protesters who were standing in the road, before appearing to collide with at least one person. Essex Police Assistant Chief Constable Stuart Hooper told the PA news agency the video had been reported to the force, but said they had seen another video 'which maybe shows it from a different angle'. 'And I guess the angles and perceptions show a different thing,' he added. 'So I'm not sure that exact incident is as it's been reported in the media.' The police chief promised to hold criminals to account for 'selfish and mindless' violence and vandalism following the events on Thursday night. A group of protesters started with a peaceful demonstration in Epping town centre, before moving onto the Bell Hotel, where things later turned violent. There have been a number of demonstrations outside the hotel since Essex Police charged 38-year-old asylum seeker Hadush Gerberslasie Kebatu with sexual assault following an incident where he is alleged to have attempted to kiss a 14-year-old girl. He denied the charge when he appeared at Chelmsford Magistrates' Court on Thursday. Mr Hooper said his team were now combing through CCTV to identify those responsible 'for assaults on our staff, through to damage and abhorrent language that was used'. 'Then we can start knocking on doors and bring those involved to justice that were responsible for that selfish criminality,' he said. 'But we also want to work with the community to facilitate people using their voice in peaceful protests.' At a press conference on Friday, Mr Hooper spoke of two people who have been arrested – one on suspicion of affray following reports of an assault during a protest on Sunday, and the other for failing to comply with dispersal orders. Mr Hooper said the man accused of affray, 65-year-old Dean Walters, has since been charged and the second suspect remains in custody. During a protest on Sunday, fireworks were let off and eggs were thrown outside the hotel. On Friday afternoon, a security guard remained on site at the Bell Hotel, opening the gate in the fencing and the door of the hotel to let people in and out. Fencing has since been put up to surround the hotel, accompanied with no entry signs. There are also warnings forbidding photography and filming in the vicinity of the hotel. Broken glass and remnants of flares remain on the ground from the incident. Mr Hooper believes that, although there are polarised views in Epping surrounding the hotel holding asylum seekers, a lot of those responsible for the violence came from further afield. He said: 'We actually saw last night we believe outsiders from our communities. People have come from outside their local areas into Epping to commit acts of violence and damage. 'That was really disappointing to see, because we know our communities wanted a voice and wanted to tell us what was going on, and they were peaceful in their activity. 'I've seen some of the social media comments and spoken to a number of members of the community, and there are polarised views. 'But it's our role as police to be independent and to, without fear or favour, make sure that people have the right to peaceful protest. 'What I won't stand for is those mindless acts of vandalism and violence that we saw and making sure that we are very robust in supporting our communities. 'Our communities don't want to see this violence, and they want to have their voice heard peacefully.'
Yahoo
15 minutes ago
- Yahoo
Ofwat could be scrapped in water reforms
An independent review of the water industry is to recommend sweeping changes to the way the sector is managed, including the potential replacement of Ofwat with a strengthened body combining economic and environmental regulation. Former Bank of England governor Sir Jon Cunliffe will publish the findings of the Independent Water Commission on Monday, with stakeholders across the industry expecting significant changes to regulation to be at its heart. The existing regulator Ofwat has been under fire from all sides in recent years amid rising public anger at levels of pollution and the financial management of water companies. Read more: Campaigners and politicians have accused Ofwat of failing to hold water operators to account, while the companies complain that its focus on keeping bills down has prevented appropriate investment in infrastructure. In an interim report, published in June, Sir Jon identified the presence of multiple regulators with overlapping responsibilities as a key issue facing the industry. While Ofwat is the economic regulator, the Environment Agency has responsibility for setting pollution standards, alongside the Drinking Water Inspectorate. Sir Jon's final report is expected to include a recommendation that the government consider a new regulator that combines Ofwat's economic regulatory powers with the water-facing responsibilities currently managed by the EA. In his interim report Sir Jon said options for reform ranged from "rationalising" existing regulation to "fundamental, structural options for integrating regulatory remits and functions". He is understood to have discussed the implications of fundamental reform with senior figures in industry and government in the last week as he finalised his report. Environment Secretary Steve Reed is expected to launch a consultation on the proposals following publication of the commission report. The commission is also expected to recommend a "major shift" in the model of economic regulation, which currently relies on econometric modelling, to a supervisory approach that takes more account of individual company circumstances. Read more from Sky News: Sir Jon has said the water industry requires long-term strategic planning and stability in order to make it attractive to "low-risk, low-return investors". The water industry has long complained that the current model, in which companies are benchmarked against a notional model operator, and penalised for failing to hit financial and environmental standards, risks a "doom loop". Thames Water, currently battling to complete an equity process to avoid falling into special administration, has said the imposition of huge fines for failing to meet pollution standards is one of the reasons it is in financial distress. Publication of the Independent Commission report comes after the Environment Agency published figures showing that serious pollution incidents , and as Thames Water imposes a hosepipe ban on 15m customers. Ofwat, Water UK and the Department for the Environment all declined to comment.
