According to IT Pro, police and fire services across England and Wales are facing elevated risks of cyber attacks due to a reliance on outdated legacy systems and persistent human error.
A report from His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services indicates that while minor progress has occurred over the last six years, current defenses remain insufficient. The inspectorate highlighted that legacy infrastructure is the primary strategic vulnerability. Furthermore, the reliance on third-party information and communications technology suppliers creates significant exposure, particularly regarding sensitive data related to intelligence and ongoing investigations. Internal security practices also remain a concern, with reports of poor password management, inadequate multi-factor authentication and insufficient training for staff transitions. Inspectors described current backup and restoration capabilities as unsatisfactory, leaving services vulnerable to prolonged disruption. Leadership engagement is identified as a critical failure, as many senior officials do not treat cybersecurity as a core operational priority. To address these gaps, the inspectorate recommends establishing baseline cybersecurity standards, enhancing third-party contract oversight and improving national coordination. These findings follow recent security warnings issued to the Metropolitan Police Service and a disruptive incident affecting the Dyfed-Powys Police, underscoring the urgent need for systemic improvements to protect public safety and sensitive data.
Source: IT Pro
