UK government submits bill to strengthen critical infrastructure against cyberattacks

The government of the United Kingdom has introduced a new bill that aims to better protect healthcare providers, drinking water providers, transport networks, and utility suppliers against cyberattacks.

The goal of the Cyber Security and Resilience Bill is to ensure the continuity of utilities and vital services in the UK, and to strengthen the country’s national security.

The proposed laws require businesses and organizations in the UK’s vital sectors to implement tougher security measures against cyber threats. Medium-sized and large companies providing services like IT management, IT helpdesk support, and cybersecurity to private and public sector organizations will need to beef up their security as well.

For example, these organizations need to inform their regulator and the National Cyber Security Centre (NCSC) within 24 hours if a harmful cybersecurity incident occurs. In addition, they need to deliver a full report of the incident within 72 hours. If they experience or face a significant cyberattack, they will have to notify customers as soon as possible.

Furthermore, regulators will receive new powers to designate critical suppliers to the UK’s essential services. This means they will have to adopt and meet minimum security requirements.

Enforcement will be “modernized,” meaning that companies will get higher penalties for serious data breaches.

Lastly, the Technology Secretary will get new powers to instruct regulators and the organizations they oversee to implement specific and proportionate steps to prevent cyberattacks if these risks pose a threat to the UK’s national security.

“Cybersecurity is national security. This legislation will enable us to confront those who would disrupt our way of life. I’m sending them a clear message: the UK is no easy target,” Liz Kendall, Secretary of State for Science, Innovation and Technology, said in a statement.

She continues by saying that the Cyber Security and Resilience Bill will make the UK more secure against cyber threats. “It will mean fewer cancelled NHS appointments, less disruption to local services and businesses, and a faster national response when threats emerge,” Kendall adds.

“As a nation, we must act at pace to improve our digital defenses and resilience, and the Cyber Security and Resilience Bill represents a crucial step in better protecting our most critical services,” Richard Horne, CEO of the NCSC, said in response to the Secretary’s words.

Unlock more exclusive Cybernews content on YouTube.