SolarWinds Cyberattack

Lord Harris of Haringey Excerpts

Monday 25th January 2021 Lords Chamber

[Lord True (Con)]

I thank my noble friend for his comments. He is, of course, right that the current five-year strategy expires this year. The next iteration of the strategy is being developed and is expected to be published this year. This will set out the direction and ambition for the UK to be a continuing leader in cybersecurity, in line with the priorities of the integrated review. It will also set out how the UK will step up its efforts to shape the global rules, as my noble friend commented.

[Lord Harris of Haringey (Lab) [V]]

My Lords, I refer to my interests as set out in the register. The response from the noble Lord has been complacent. A large number of systems in the national infrastructure use SolarWinds software and have been compromised. The House has not been told how many. Will the Intelligence and Security Committee be briefed on the full extent and implications? There is a wider question: does reliance on such commercial software solutions not create a single point of failure for our security and economy, as multiple systems—otherwise unrelated—can be penetrated simultaneously, potentially leading to a catastrophic collapse?

[Lord True (Con)]

My Lords, the Government’s response is anything but complacent. I had hoped that I had made that clear, but I will say it again. The Government’s response is not complacent. The NCSC is working to mitigate any potential risk. Actionable guidance has been published through its website. We urge organisations to take immediate steps to protect their networks. We will continue to update as we learn more.