UK launches £210 million cyber action plan for public services

The United Kingdom has launched its Government Cyber Action Plan, allocating £210 million to enhance cybersecurity across digital public services. This initiative will hold government departments to the same stringent cybersecurity standards applied to critical infrastructure operators, as reported by The Register.

The funding will establish a Government Cyber Unit, led by the UK's CISO and overseen by the Department for Science, Innovation and Technology (DSIT). This unit aims to improve risk identification, incident response, and recovery capabilities, while also creating a dedicated Government Cyber Profession. The plan, announced alongside the Cyber Security and Resilience Bill, mandates that government departments adhere to the same security requirements as cloud providers and critical infrastructure operators. This investment is projected to save the public sector up to £45 billion annually, following recent security failures in departments like the Foreign Office and the Legal Aid Agency, and a critical report from the National Audit Office highlighting significant weaknesses in government IT systems.

This comprehensive plan signifies a major regulatory shift, bringing government digital services under a stricter cybersecurity regime. The initiative also includes a Software Security Ambassador Scheme, encouraging secure development practices among industry leaders. By mirroring international efforts like CISA's Secure by Design pledge and focusing on supply chain security, the UK aims to significantly bolster its national cyber defenses and resilience against escalating threats.

Source: The Register