Asked by: Lord Browne of Ladyton (Labour - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government, with regard to their Government Cyber Security Strategy: 2022–2030, published on 25 January 2022, what assessment they have made of the UK Cyber Security Council’s progress in developing consistent taxonomies, standards and pathways for the cyber security profession across the UK.
Answered by Viscount Camrose - Parliamentary Under Secretary of State (Department for Science, Innovation and Technology)
The UK Cyber Security Council was established to develop professional standards so that cyber security can be appropriately recognised as a profession, similar fields such as accounting and engineering. In October 2023, the Council announced that over 100 cyber security practitioners had been awarded professional titles (including chartered status) and this number is increasing. The Council has used its standards to outline pathways into and through the cyber security profession by creating a Cyber Careers Framework. The Council continues to work with stakeholders in government, industry, and academia to ensure that the standards it sets are relevant, accessible, and demand consistent high quality from cyber security practitioners throughout the UK.
Asked by: Lord Browne of Ladyton (Labour - Life peer)
Question to the Department for Science, Innovation & Technology:
To ask His Majesty's Government what steps they are taking to support businesses seeking to adopt process improvement programmes for their organisational cyber-resilience.
Answered by Viscount Camrose - Parliamentary Under Secretary of State (Department for Science, Innovation and Technology)
The government is inviting views on a proposed Cyber Governance Code of Practice until 19th March. This is part of a package of action in the £2.6 billion National Cyber Strategy to drive up improvements in organisational cyber resilience. Co-designed with the National Cyber Security Centre (NCSC) and industry experts, the Code consolidates critical cyber governance areas for directors' ownership. As part of this package, the NCSC revised their Board Toolkit (BTK) and intends to develop an online Cyber Governance Training Pack for Boards, integrating the Code and BTK. This comprehensive package will help boards ensure that cyber resilience is embedded throughout their organisation, including its people and processes.