Policy paper

DSIT cyber security newsletter - March 2024

Published 11 March 2024

1. Director’s message

This last month we have been talking about how we can change the way cyber security is discussed in the boardroom. With our consultation on the Cyber Governance code of practice ongoing, we have been talking to businesses about the code and how boards need to think about responsibilities and the opportunities that could be exploited with the right attention to cyber risks.

Hopefully you will have seen that the Rt Hon Stephen McPartland MP is conducting an independent review of how cyber security can be used as a catalyst to drive growth across all sectors of the UK economy. Stephen is interested in talking to people on company boards to understand how they make decisions to invest in cyber security to protect their organisations. The narrative around cyber is usually about threats but better security might derive many other business benefits that should be considered.

The review will be engaging with stakeholders across the cyber sector and wider economy and there is currently a call for views open so you can share your expertise and insights. I encourage you all to take part and to share the call for views with people you think can have a valuable input. The call for views closes on Thursday 28 March. 

Entries are still open for the Most Innovative Cyber SME competition at Infosecurity Europe 2024, which is looking for the most creative and original cyber security companies in the country, deadline for application is 29 March 2024.   
I am sure you have been following the takedown of Lockbit by the National Crime Agency and its international partners. The scale of the harm caused by this ransomware service is mind blowing and it should make everyone pause to think about their own security. It is vital that organisations report if they are the victim of a ransomware attack to allow assessment of new methodologies, limit the damage they can do to others and to grow our collective understanding. 

Andrew Elliot  
Interim Director, Cyber Security and Digital Identity

2. McPartland Review asks for views on cyber security and economic growth

The government has commissioned Stephen McPartland MP to conduct an independent review into cyber security and economic growth. To inform this work, the review has published a call for views where businesses, experts and other interested parties can submit their ideas. The review is looking at areas such as investment, standards, insurance and how to better adopt good cyber security practices. 

For more details and to respond, please visit the call for views webpage. The survey is open until Thursday 28 March 2024.

3. Secure connected places – call out for case studies

The Secure Connected Places team is developing materials to help local authorities promote and explain connected places (also known as smart cities) to the general public. This will include a short, animated video and an infographic. In addition to this work a consultation guide is being drafted. This will provide local authorities with guidance on how to engage members of the public, to build trust and support for connected place projects. For this document we are looking to promote some case studies of good public engagement. 

If you manage any connected place / smart city projects, and would like to tell us how you have improved public trust and perceptions of your connected place, please contact: secureconnectedplaces@dsit.gov.uk 

We hope to publish this work in the spring, and the team look forward to receiving your responses.

4. CHERI tech adoption research survey open for participation

The UK government is investing in the development of a ground-breaking microprocessor architecture called CHERI (Capability Hardware Enhanced RISC Instructions). This innovative technology provides fine-grained memory protection and compartmentalization, offering robust defence against over 70% of existing cyber vulnerabilities. 

Widespread adoption of CHERI can potentially revolutionise both the hardware and software landscapes. To gain deeper insights into the market potential for CHERI and to address any barriers hindering its adoption, the government has partnered with RSM to conduct comprehensive research. 

If you’re knowledgeable about cyber security technologies and want to contribute to making modern IT systems more secure, we invite you to participate in our survey. Your insights will shape the future of cyber resilience. Join us by taking part in the survey by Friday 8 March 2024.

5. Cyber Runway Gulf trade mission

In February, 12 alumni of the government’s Cyber Runway programme undertook a trade mission to Dubai, supported by DSIT and Plexal. The visit helped the firms understand the Gulf Cooperation Council region as a potential growth market and make connections with local businesses and organisations. 

As part of the mission the start-ups pitched to local distributors, businesses and legal experts and participated in roundtable discussions. The delegation also visited the Dubai Cyber Innovation Park and the Dubai Airport Freezone. 

For advice on how to sell your products and services abroad, please visit the GREAT website.

6. CyberEPQ webinar opportunity - 5 March

The Chartered Institute of Information Security (CIISec) are running a webinar on CyberEPQ, the Extended Project Qualification in cyber security, on 5 March 2024.
This session will provide an overview of the CyberEPQ; why we should be encouraging students and career changers to participate and the corporate sponsorship opportunities. Please sign up to attend here and please share the event with any other interested groups. 

DSIT is proud to support the CyberEPQ, a recognised part of the CyberFirst pipeline and the only accredited Level 3 Extended Project Qualification (EPQ) in Cyber Security. There are still limited DSIT funded places available for students (16-18) to enrol on the CyberEPQ this academic year. If you are interested or would like more information, please visit the CyberEPQ website.

7. New campaign promotes digital skills training

DSIT Secretary of State Michelle Donelan launched the government’s new Advanced Digital Skills campaign on 20 February to drive up the number of young people learning advanced digital skills.

The free courses last up to 16 weeks and cover a wide range of digital skills, from web and software development to cyber security and cloud computing, with a guaranteed job interview after completing the course. The campaign comes as new research reveals the skills offered by the free bootcamps can lead to average salaries exceeding £70,000, two and half times the UK average.

8. Cyber governance consultation still open for views

The government recently published a draft Cyber Governance Code of Practice to help businesses and organisations manage the cyber risks they face. The proposed Code sets out key actions Directors should take to strengthen their cyber resilience and take full advantage of digital technologies. The Code is for organisations of all sizes and will help business leaders manage cyber threats in the same way they do with other business risks, like financial and legal. 

The government is seeking views on the draft Code and invites responses by Tuesday 19 March 2024.

9. New campaign urges public to Stop! Think Fraud.

The government has launched a major new campaign to transform the fight against fraud and keep the public safe from fraudsters and cyber criminals. Stop! Think Fraud is backed by leading counter fraud experts to provide consistent, clear and robust anti-fraud advice to the public. Fraud accounts for around 40% of all crime in England and Wales, with an estimated 3.2 million offences each year.  

The campaign includes a new online fraud hub which provides concise, simple to follow advice to help the public and businesses protect themselves against cyber-enabled fraud.

You can watch the TV advert on YouTube. Interested organisations can support and amplify the campaign using the campaign partner pack - please send us an email for further details.

10. The Cyber Diversity Awards 2024

Tickets are available for The Ethnic Minority in Cyber Awards which raise awareness of the amazing cyber security initiatives taking place across the UK. The Awards celebrate and honour the great work done by organisations and individuals to actively promote and champion diversity in the cyber security sector.

The event takes place on 5 March 2024 at The Halls Wolverhampton, North Street, Wolverhampton.

11. Infosecurity Europe: Most Innovative Cyber SME competition – Open for entries

Entries are now open for the Most Innovative Cyber SME competition at Infosecurity Europe 2024. Run jointly by Infosecurity Europe and DSIT, the competition is looking for the most creative and original cyber security companies in the country, one of which will be crowned the UK’s Most Innovative Cyber SME 2024. The top 14 innovative cyber SMEs will be invited to join the Cyber Innovation Zone at Infosecurity Europe 2024 - Europe’s leading cyber security event taking place on 4 – 6 June. They will be offered an event exhibition package, two showcase speaking slots and a marketing package. The winner will be announced at the event. 
 
Infosecurity Europe 2024 is the most comprehensive cyber security exhibition in Europe. Your company will benefit from featuring in one of Europe’s top events for the information security industry and be able to showcase your services and products in front of an audience of cyber security professionals, buyers and investors. 

The deadline for application is 29 March 2024.  The finalists will be announced on 22 April 2024.

12. News in brief 

• The UK hosted a conference with 35 other countries to address threats caused by the proliferation of commercial cyber intrusion tools and services.  

• The National Crime Agency has revealed details of its international disruption campaign which has taken control of the services of LockBit, the world’s most harmful cyber crime group.

• The National Cyber Security Centre have written a new blog on cyber governance and the importance of boards remaining vigilant on cyber security.

• DSIT has published new Research on Managed Service Providers which details the UK MSP market, including its size and the range of services provided. The cyber security of MSPs is an important aspect of the UK digital economy.