The UK Needs To Reevaluate Its Cybersecurity Strategy

Following the recent change in Government, the Labour Party is facing significant challenges in shaping the future of the UK. One less publicised area which requires the Labour Party’s immediate attention is the UK’s cybersecurity strategy.

With “The Cyber Security Breaches Survey” revealing that over 50% of UK businesses experienced a cyber breach or attack in the past year - it is clear that the UK’s evolving threat landscape is something that can no longer be ignored.

The Labour Government’s campaign was centred around promises of transformation following 14 years of Conservative leadership, with the party acknowledging the growing risks of cyberattacks in its manifesto. With technologies such as AI allowing cybercriminals to launch more advanced attacks, at a greater scale and with ease - this threat will only continue to increase.

So what actions should both the Government and the private sector be taking to safeguard the UK’s digital landscape once and for all?  

Digital Transformation: the driving force behind modernising the UK’s cybersecurity

One of the most common vulnerabilities across all industries is a reliance on legacy systems. Despite research revealing that a cyber attack occurs every 44 seconds, more than two-thirds of UK businesses still use legacy technology to run core operations, and over 60% of customer-facing applications also rely on these outdated technologies.

Legacy systems are especially vulnerable as they were not designed with today’s cybersecurity landscape in mind. They were initially developed when cyber threats were much less sophisticated, which means they do not meet the requirements to counter today’s tech-savvy attacks. What is even more concerning is that many of these systems still run on outdated operating platforms, meaning that they no longer receive critical patches and security updates that prevent them from being easily exploited by cybercriminals. 

With AI allowing threat actors to launch more sophisticated attacks than ever before, it is crucial for businesses to recognise the importance of transitioning away from legacy systems. As the threat landscape continues to evolve, this transition is no longer a “nice to have”, it is a necessity. 

Another element of building cyber resilience that is often overlooked is a continued reliance on traditional postal communications. As businesses continue to transform their customer comms, they should look to replace traditional postal services with secure, digital alternatives. This is especially pertinent after the release of the latest data from Ofcom’s Residential Postal Tracker, revealing that 54% of consumers prefer not to receive post from any organisation and 70% prefer email communications over postal communications. By leveraging the encryption and authentication technologies associated with secure comms solutions, businesses can ensure that data is protected across its entire journey to enhance overall security. Not only this, but digital delivery is much faster, cheaper and more reliable than traditional postal communications, which are increasingly being exploited by fraudsters.

The Importance Of Legislative Action

As the Autumn Budget continues to draw nearer and the Labour Government begins to decide its priorities - bolstering the UK’s cybersecurity must be at the forefront of policy decisions. The Labour Government should look to introduce legislation which mandates the transition from legacy systems to modern, more secure alternatives. As both the public and private sectors continue to rely on legacy technologies and leave themselves vulnerable to attacks - a strong legislative framework is the key to compelling organisations to regularly upgrade their infrastructure. This will help to ensure they will stay afloat during the growing cybercrime wave.

Cybersecurity must also be viewed as a national security issue. Just as the Government invests in the military to protect against physical threats, the same attention and resources should be directed towards safeguarding the nation from hidden, digital dangers. With recent cyber incidents, such as the NHS cyber attack earlier this year, demonstrating that cyber attacks can have far-reaching consequences - cybersecurity should now be considered a key requirement for protecting the UK’s infrastructure.

Raising Awareness To Empower Individuals & Businesses Alike

As cyber threats continue to proliferate and evolve, public education is essential in helping to mitigate this risk. The Government must lead efforts to increase awareness and provide resources to help consumers and businesses stay protected. A strong national focus on cyber hygiene is key, and it must begin by educating those who are least familiar with digital risks. By empowering the public, the Government will be able to foster a culture of cyber resilience and readiness across the nation.

It is time for the Labour Government to showcase its commitment to driving meaningful change and introduce the measures required to safeguard businesses, consumers and their data.

By giving statutory underpinning to the retirement of vulnerable legacy technology, prioritising the use of secure digital communications and increasing education efforts - the UK can fortify its defences against evolving cyber threats once and for all. Only through these decisive actions can we ensure a safer digital future.

Paul Holland is CEO of Beyond Encryption

You Might Also Read: 

A House Of Cards:


If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« DDoS Attacks Against Japan
Nowhere To Run »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

OASIS Open

OASIS Open

OASIS Open is where individuals, organizations, and governments come together to solve some of the world’s biggest technical challenges through the development of open code and open standards.

ENVEIL

ENVEIL

ENVEIL’s technology is the first scalable commercial solution to cryptographically secure Data in Use.

DirectDefense

DirectDefense

DirectDefense is an information security services and managed services provider.

AlAnsari Technical Solutions (ATS)

AlAnsari Technical Solutions (ATS)

ATS is a Kuwait based company specialised in delivering hardware/software, Virtualisation, IP Telephony / Unified Communication, Networking and professional IT services and solutions.

CETIC

CETIC

CETIC is an applied research centre in the field of ICT. Key technologies include Big Data, Cloud Computing, the Internet of Things, software quality, and trust and security of IT systems.

42Gears

42Gears

42Gears is a leading Unified Endpoint Management provider. Secure, monitor and manage tablets, phones, desktops and wearables.

Lifespan Technology

Lifespan Technology

Lifespan Technology provides the full range of IT Asset Disposition services. This includes hardware recycling and disposal, data destruction, and hardware resale.

Cyan Securiy Group

Cyan Securiy Group

Cyan provide best-in-class cyber security solutions for mobile Internet and mobile devices that are extremely effective and highly intuitive in their use.

Thomsen Trampedach

Thomsen Trampedach

Thomsen Trampedach offers a tailored-made brand protection solution to each customer using a proprietary enforcement automation and reporting tool and a multilingual enforcement team.

Adlumin

Adlumin

Adlumin Inc. provides the enterprise-grade security operations platform and managed detection and response services that keep mid-market organizations secure.

FortifyData

FortifyData

FortifyData is the next generation of cyber risk management–a comprehensive platform that continuously evaluates your third-party, internal and people risks.

CyberSheath Services International

CyberSheath Services International

CyberSheath integrates your compliance and threat mitigation efforts and eliminates redundant security practices that don’t improve and in fact might probably weaken your security posture.

SLVA Cybersecurity

SLVA Cybersecurity

SLVA Cybersecurity excel at delivering security-as-a-service, fit-for-purpose, within the constraints of realistic budgets and business expectations.

ASPIA InfoTech

ASPIA InfoTech

ASPIA Infotech is a leading Information and cybersecurity organization focused on innovative approaches to avert targeted attacks.

Cognna

Cognna

Cognna's innovative platform is designed to empower you and your team, providing the tools you need to detect, prevent, and resolve threats with ease.

Arculus Cyber Security

Arculus Cyber Security

Arculus Cyber Security enables customers to securely realise the benefits of digital transformation through pragmatic solutions, guidance and services.