SolarWinds Cyberattack

Lord Browne of Ladyton Excerpts

Monday 25th January 2021 Lords Chamber

[Lord True (Con)]

My Lords, I apologise; I found it quite hard to catch every part of the noble Baroness’s question. I hope this is not an inadequate answer, but I am unable to comment on operational detail at this stage. However, as I have assured the House, the NCSC is working to mitigate all potential risks, and this work is ongoing.

[Lord Browne of Ladyton (Lab) [V]]

My Lords, SolarWinds highlights concerns about the growing privatisation of cybersecurity attacks through a new generation of private companies, described in a recent Microsoft blog as

“akin to 21st-century mercenaries”

who offer

“the option for nation-states to either build or buy the tools needed for sophisticated cyberattacks.”

Already the US is battling one such company in their courts. Can we be assured that the Government’s review will consider whether our cyber capability and regulatory infrastructure is fit for purpose in the face of this emerging threat?

[Lord True (Con)]

I agree with the noble Lord on the importance of sustaining and improving that capability. The Government are certainly giving attention to that—seeking to promote cyber skills and to encourage a sustainable pipeline of homegrown cybersecurity talent, and protecting our critical infrastructure. That is a key part of the strategy going forward. The noble Lord is quite right that, currently, the demand for cybersecurity skills outstrips supply. We must mend that issue.