23 January 2024 , 13:02
928
0
Business leaders have been given new advice on how to strengthen their cyber defences.
The Government has urged companies to view cyber threats as a major business risk, just like financial or legal challenges. The draft code of practice on cyber security has been published in partnership with industry experts and the UK's National Cyber Security Centre (NCSC). It is aimed at executive and non-executive directors.
The code advises senior leaders to make cyber security a key focus for their business. It recommends setting out clear roles and responsibilities across an organisation, increasing protection for customers and safeguarding the firm's ability to operate safely and securely. The NCSC has repeatedly warned about the ongoing cyber threat to the UK, especially from ransomware attacks.
These are where hackers gain access to a user's system and either steal or block access to data and demand a ransom payment to release it. The new code suggests firms should have detailed plans in place to respond to and recover from any potential cyber incidents. It also recommends regular testing of such plans and formal systems for reporting incidents.
The code also encourages firms to improve the cyber skills and awareness of their employees where possible. The government's AI and intellectual property minister, Viscount Camrose, has warned that cyber attacks can hurt businesses just as much as money troubles or legal issues.
He said: "This new code will help them take the lead in safely navigating potential cyber threats, ensuring businesses across the country can take full advantage of the emerging technologies which are revolutionising how we work. It is vital the people at the heart of this issue take the lead in shaping how we can improve cyber security in every part of our economy, which is why we want to see industry and business professionals from all walks coming forward to share their views."
The Government wants to hear what businesses think about this new code to make it even better. Lindy Cameron, who's in charge of the NCSC, added: "Cyber security is no longer a niche subject or just the responsibility of the IT department, so it is vital that CEOs and directors understand the risks to their organisation and how to mitigate potential threats."
She encourages all big bosses to have their say: "This new cyber governance code of practice will help ensure cyber resilience is put at the top of the agenda for organisations and I'd encourage all directors, non-executive directors, and senior leaders to share their views. Senior leaders can also access the NCSC's cyber security board toolkit, which provides practical guidance on how to implement the actions outlined in the code, to ensure effective management of cyber risks."
* An AI tool was used to add an extra layer to the editing process for this story. You can report any errors to [email protected]