Policy paper

Government response on supply chain cyber security

The government's response to a call for views on improving cyber security in supply chains and managed service providers.

Documents

Details

An increasing number of organisations are suffering cyber attacks via their supply chains or via their providers of IT services. In May 2021 the government held a call for views on supply chain cyber security which sought feedback on how to improve cyber security in supply chains and in managed service providers. The attached document contains a summary of the evidence received and the government’s response to the issues raised.

You can read more in the news story here:

New plans to boost cyber security of UK’s digital supply chains

The evidence received shows there was broad agreement among respondents to the government’s analysis of the challenges around supply chain cyber security. There was also broad agreement that further support and intervention from the government would be required. Further details are contained the attached document.

Also being published alongside this government response is new research on how businesses are dealing with cyber security. The Captains of Industry Cyber Resilience Research assesses the action the UK’s leading firms are taking on cyber security, including how they manage supply chain cyber risks.

Both of these reports are part of the government’s wider work to protect the UK online and improve the cyber resilience of organisations across the economy and society.

For more information, please read the section on cyber resilience.

Published 15 November 2021