Government launches cyber security measures to tackle “ever-growing threats”

Posted to News on Thursday, May 4, 2023 Share:

NEW CYBER security measures will increase the UK’s cyber resilience and protect the Government’s essential IT functions from “ever-growing threats”. Under the new rules, all central Government departments will have their cyber health reviewed annually through the use of new and more robust criteria.

Known as GovAssure, the new cyber security scheme will be run by the Cabinet Office’s Government Security Group with key input from the National Cyber Security Centre.

GovAssure was initially announced by Chancellor to the Duchy of Lancaster, Oliver Dowden, at a speech given to delegates to CyberUK in Belfast.

Dowden commented: “Cyber threats are growing, which is why we are committed to overhauling our defences to better protect Government from attacks. This stepped-up cyber assurance will strengthen Government systems, which run vital services for the public, against attacks. It will also improve the country’s resilience.”

GovAssure introduces a number of changes in the way Government protects itself from cyber threats. These include:

*Using the National Cyber Security Centre’s Cyber Assessment Framework to review the assurance measures all Government departments have. The framework includes measures such as setting out indicators of good practice for managing security risk and protecting against a cyber attack and was designed for making critical national services resilient to attack

*Government departments will also be assessed by third parties to increase standardisation and validate results

*Centralised cyber security policy and guidance to help Government organisations identify Best Practice

Significant challenges

In January 2022, the UK Government launched the first-ever Government Cyber Security Strategy, which laid out the significant challenges facing Government security and a clear vision for improving resilience.

The latest announcement delivers on a key part of the aim of the strategy of significantly hardening Government systems from cyber attack.

Vincent Devine, the Government’s chief security officer, explained: “This is a transformative change in Government cyber security. GovAssure will give us far greater visibility of the common cyber security challenges facing Government. It will set clear expectations for departments, empower hard-working cyber security professionals to strengthen the case for security change and investment and serve as a powerful tool for security advocacy.”

Lindy Cameron, CEO at the National Cyber Security Centre, commented: “We are committed to ensuring the UK continues to be a leading global cyber nation, which is why we’ve supported the development of the Cyber Assessment Framework to improve the security of our most critical information systems.

The Government’s adoption of the Cyber Assessment Framework through GovAssure will significantly improve resilience.”