Aaran Leyland

Further Cyber Security Agony for the UK Government - What's Going On? 🛡️💻 The Defence Secretary, Grant Shapps, apologises to over 270,000 members of the Armed Forces impacted by a cyberattack on the UK Ministry of Defence's outsourcing partner, revealing a breach targeting banking details and personal records. Amid growing concerns over national security, suspicions point towards China, prompting calls for a reassessment of Sino-British relations and a reevaluation of cybersecurity measures to protect critical infrastructure. To read Curia's analysis, by Robert Clark, please click below 👇 https://lnkd.in/gEbWkG_C #Cybersecurity #UKPolitics #UKGovernment #NationalSecurity #CyberAttack #MoD #ArmedForces #CyberThreat #UKDefence #DigitalSecurity #CyberCrime #DataBreach #CyberDefense #CyberAwareness #InfoSec #CyberResilience #GovernmentSecurity #UKMilitary #CyberSecurityAwareness #UKNationalSecurity #DefenseSecretary #CyberSecurityStrategy #CyberSecurityAwareness #UKTech #CyberSecurityResponse #UKCyberSecurity #UKDefensePolicy #CyberSecurityMeasures

5

1 Comment

Good morning, all! Paul Gogarty and I are proud to be presenting a #webinar on the #CAF guidance framework next week! Are you a power generation company? Do you work in the energy industry? Perhaps you are a site manager for a critical infrastructure facility; if so, you may need to be aligned with #CAF soon! See the link below on the ABB Process Automation post to register your interest 💻🤓

12

Interesting to see this peddled again “a lack of basic cyber hygiene”. Reviewing the latest #CyberBreach survey from HMG is sobering reading. 75% of UK business report #Cyber as being a key area for the board, yet this (again) results in total lack of #Governance: - 33% of businesses have a formal security policy - 31% have conducted a risk assessment - 30% have a board member with cyber responsibility (this has returned to the levels of 2016-18) - 27% have asset management activities - 13% are aware of the NCSC 10 Steps Guidance, but only 3% have actioned all 10 steps - 11% have conducted a pen test - 11% have reviewed their supply chains - 12% are aware of CyberEssentials (up from 8% in 2016) - 3% review NCSC/ICO guidance on Cyber (up from 2% since 2016) This is damning, we have excellent guidance on the NCSC website for Cyber and on the ICO website for Data Protection. 41% of the business are consulting externally, so why are those consultants not advising their clients correctly? I have a real issue when we fete the current #CyberSecurity strategy yet in every demonstrable metric it’s failing to engage and inform. I hope that the new government looks to reset the foundations before pushing on with anything else. Within our clients, we place baseline guidance for Cyber and Data Protection at the centre of the engagement. This ensures that governance is reset and a solid foundation can be provided for improvement.

2

2 Comments

Just published in the UK Gazette One of the best ways for employees to care about cybersecurity risk is to build a culture of innovation capable of identifying and mitigating cyber risk as part of day-to-day job routines. This entails creating in employees a mindset that the risk is real and that their daily actions impact that risk. Cybersecurity culture is essential as it plays a vital role in an organization’s ability to protect digital business performance, resilience, and trust with its clients. It must be part of a broader corporate culture of day-to-day actions, encouraging employees to make thoughtful decisions that align with security policies. Organizations unveil grand strategies and meticulously crafted blueprints for success. Yet, amidst the fanfare of vision statements and market analyses, Peter Drucker’s timeless adage whispers a crucial truth: “Culture eats strategy for breakfast.” Though deceptively simple, these five words provide a stark warning: no matter how superb the strategy, it can be undermined by human factors, the invisible forces of organizational culture. The question is, how can you evaluate organizational culture? Tools such as the DVMS Cybersecurity Cultural Assessment Tool can help understand employee attitudes and perceptions towards cybersecurity with a comprehensive 67-question survey. Once responses have been collected, the organization is scored against the known factors that drive positive culture. Leadership can then use this data to build and implement a plan to realize its future cybersecurity—upskilling employees, reinforcing cyber resilience, and ensuring the company has standardized processes based on the NIST Cybersecurity Framework that comply with government regulations. DM me if you would like a demo of the DVMS Cultural Assessment Tool or learn more about the DVMS Institute DVMS NIST Cybersecurity Framework Overlay System and its accredited certification training programs, publications, and advisory services

2

#Cybersecurity "The proportion of UK businesses with basic and advanced technical skills gaps has not changed significantly across the 6 years of data. We estimate that approximately 637,000 businesses (44%) have a basic skills gap, where employees responsible for cyber security lack the confidence to carry out the basic tasks laid out in the government-endorsed Cyber Essentials scheme, and are not using external cyber security providers for these tasks. Approximately 390,000 businesses (27%) have gaps in advanced skills, such as penetration testing. These are skills which are not outsourced, and which are considered important (i.e. appropriate for businesses with more complex cyber security needs)." "We estimate that 30% of cyber firms in 2024 have faced a problem with a technical skills gap, which is lower than in 2023 (49%). There has been a significant decline in reported skills gaps across many areas, for instance security testing (23%, down from 35%). In contrast, the skills gap for cryptography and communication security has increased (24%, up from 12%)." "In the qualitative research, employers and recruiters thought that AI is likely to have a major impact on the cyber skills landscape, although there was a great deal of uncertainty about what the future will look like. Four potential changes were identified; increasing automation of cyber tasks (which could lead to job losses), the need for skills to understand and act upon AI tools, roles becoming ‘AI cyber’ rather than just ‘cyber’ and the emergence of deep specialisms such as ‘cyber security machine learning.’" https://buff.ly/3zigs9H #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

4