The UK Government's Cabinet Office has received a broadside from The National Audit Office (NAO) which has sharply criticised it over failings in how it set up the National Cyber Security Programme that mean it may struggle to meet its goals
The NAO believes the Cabinet Office took its eye off the ball when it established the National Cyber Security Programme almost three years ago, and the government now does not know whether it will be able to meet the programme’s goals, or adequately protect UK citizens, businesses and infrastructure from cyber attacks after 2021.
The NAO said it was unclear whether or not the programme, which was designed to establish a “focal point” for cybersecurity activity across government, would achieve any of its wider strategic outcomes by 2021.
This was not only due to the difficulty of dealing with the ever-changing and complex cybersecurity landscape but also because the Cabinet Office had not properly assessed whether the £1.3bn of funding – out of £1.9bn of funding allocated to the National Cyber Security Strategy – set aside for the programme was sufficient.
The NAO said the programme’s work was delayed after a third of its planned funding was redirected to some of the UK’s wider national security needs, such as counter-terrorist work. This set back crucial work to understand cybersecurity issues.
“Improving cybersecurity is vital to ensuring that cyber attacks don’t undermine the UK’s ability to build a truly digital economy and transform public services. The government has demonstrated its commitment to improving cybersecurity,” said NAO chief Amyas Morse.
“However, it is unclear whether its approach will represent value for money in the short term and how it will prioritise and fund this activity after 2021. The government needs to learn from its mistakes and experiences to meet this growing threat.”
MP Meg Hillier, chair of the Public Accounts Committee (PAC), said the programme was another example of an important government initiative being launched without getting the basics right.
“There were serious weaknesses in its initial set up, undermining its contribution to government’s overall cybersecurity strategy,” she said.
“The increasing cyber threat faced by the UK, and events such as the 2017 WannaCry attack, make it even more critical that the Cabinet Office take immediate action to improve its current programme and plan for safeguarding our cybersecurity beyond 2021.” Cabinet Office over failings in how it set up the National Cyber Security Programme that mean it may struggle to meet its goals."
Europol Releases Latest IOCTA Report
Each year, Europol’s European Cybercrime Centre (EC3) publishes the Internet Organised Crime Threat Assessment (IOCTA), its flagship strategic report on key findings and emerging threats and developments in cybercrime — threats that impact governments, businesses and citizens in the EU.read more
European Cybersecurity Month 2019 Is launched
October marks the kick-off of the European Cybersecurity Month (ECSM), coordinated by the European Union Agency for Cybersecurity (ENISA), the European Commission and supported by the Member States. This campaign will focus on expanding awareness about cybersecurity to citizens across Europe.read more
Remote Desktop Attacks Increasing
The Remote Desktop Protocol (RDP) is being used by cyberattackers to penetrate and extract data from a network before introducing their malicious software to perform internal reconnaissance, according to a new Vectra 2019 Spotlight Report on RDP.read more
LexisNexis Report On Cybercrime Has Shock Figures
LexisNexis Risk Solutions has released at the Digital Identity Summit its Cybercrime Report providing a comprehensive view into the shifting global fraud landscape from January 2019 through June 2019. During this period, the LexisNexis Digital Identity Network recorded 16.4 billion transactions, of which 277 million were human-initiated attacks, a 13 per cent increase over the second half of 2018.read more