Policy paper

DSIT cyber security newsletter - August 2024

Published 5 August 2024

1. Director’s message

Hello and welcome to the first issue of this newsletter since the election of a new government. I arrived as Director of Cyber Security and Digital Identity just a few days before the general election, and I’ve certainly had an interesting and eventful start to the job. 

We have a new team of very engaged ministers in the Department for Science, Innovation and Technology (DSIT), who have a strong interest in cyber security and are clear more needs to be done to address the risks. This is essential to grow the economy, develop secure technology, and drive a modern, digital government.

As an important first step, the new government confirmed as part of the King’s Speech that it will introduce a Cyber Security and Resilience Bill. There’s more on that below. 

Within a few days of that announcement, we were dealing with the impact of the CrowdStrike IT outage. Although that wasn’t a cyber attack, it highlighted the importance of our work ensuring the critical IT systems we rely on are secure and resilient. DSIT will be supporting a government lessons learned review commissioned by the Cabinet Office. 

Some of our other current priorities include improving software resilience and security, ensuring the cyber security of AI, and addressing the skills shortage in cyber security. We have consultations open on these three areas and would very much like to hear your views. Please respond to them by Friday 9 August. 

Thank you – and, in the spirit of building resilience, I hope that you have some time off to take a break and recharge your batteries during the summer.

Rod Latham  
Director, Cyber Security and Digital Identity

2. Cyber Security and Resilience Bill announced in King’s Speech 

The King’s Speech on 17 July set out 40 bills the government intends to deliver, with security a key theme throughout.

The Cyber Security and Resilience Bill was announced as part of the speech and sets out measures to strengthen our cyber defences and ensure more digital services and supply chains are protected. The bill will also give greater powers to regulators and mandate increased cyber incident reporting.

See page 94 of the King’s Speech briefing notes for more information on the cyber bill.

3. Respond to the cyber security consultations by 9 August

The government is currently asking for industry and stakeholder views on 3 areas of cyber security.

The Software Call for Views is asking for views on a draft code of practice for software vendors to improve the resilience and security of software.

The Cyber Security of AI Call for Views is seeking views on a two-part intervention, including a voluntary Code of Practice on AI cyber security which will form a new global standard. 

The CyberFirst Call for Views is asking for views on the future of the successful CyberFirst programme, including how the programme can be scaled to inspire future talent.

Although these were initiated under the previous government, the new government has confirmed it wishes to continue with these important consultations.

We are keen to receive your feedback so please respond by Friday 9 August.

4. Feryal Clark is new minister for cyber security as new DSIT team appointed

The Department for Science, Innovation and Technology (DSIT) has a new ministerial team with Peter Kyle as Secretary of State and Patrick Vallance as Science Minister.

Feryal Clarke was appointed as Parliamentary Under Secretary of State for AI and Digital Government, with her role covering cyber security, artificial intelligence and digital identity policy. Completing the ministerial team are Chris Bryant as Minister for Data Protection and Telecoms, and Baroness Jones as Minister for the Future Digital Economy and Online Safety.

Full details of ministerial portfolios are set out on the DSIT website.

5. DSIT is the new home for digital government 

Alongside a new ministerial team, DSIT is expanding in scope and size to become a new home for digital government which will transform public services and fuel economic growth.

The department has brought in experts in data, digital and AI, including staff from:

• Government Digital Service (GDS)
• Central Digital and Data Office (CDDO), and
• Incubator for AI (i.AI).

This will unite efforts in the digital transformation of public services under one department. Secretary of State Peter Kyle said,

DSIT will become the centre for digital expertise and delivery in government, improving how the government and public services interact with citizens.” 

For more details, please read the press notice.

6. Cyber security longitudinal survey in fieldwork phase  

The cyber security longitudinal survey is the government’s multi-year study to better understand cyber security policies and processes in medium and large businesses and high-income charities. The latest part of the survey is now in its fieldwork phase so organisations may be contacted by our supplier, Ipsos, asking if they wish to take part if they work for a medium or large business or a large charity.

For more information about the project, please visit the survey page on GOV.UK.