Andrew Miller
Main Page: Andrew Miller (Labour - Ellesmere Port and Neston)Department Debates - View all Andrew Miller's debates with the Cabinet Office
(13 years, 1 month ago)
Westminster HallWestminster Hall is an alternative Chamber for MPs to hold debates, named after the adjoining Westminster Hall.
Each debate is chaired by an MP from the Panel of Chairs, rather than the Speaker or Deputy Speaker. A Government Minister will give the final speech, and no votes may be called on the debate topic.
This information is provided by Parallel Parliament and does not comprise part of the offical record
It is a pleasure to serve for the first time under your chairmanship, Sir Alan, and to be opening the first debate that the Select Committee on Science and Technology has held in Westminster Hall during this Parliament. The occasion is tinged with regret, shared by all Committee members, because it is the last time we will have with us our excellent Clerk, Glenn McKee, who has served the Committee brilliantly. We wish him well in his new career. I think it is a punishment that he has been sent to the Select Committee on Communities and Local Government, but that is another matter.
This is a particularly important report. It was published in March 2011 and it looks at the Government’s use of science in emergency preparation and response at a national level. We built on two of our predecessor Committee’s reports—one written in 2006 entitled “Scientific Advice, Risk and Evidence Based Policy Making”, and one entitled “Putting Science and Engineering at the Heart of Government Policy,” which was published in 2009. This is a complex area and we tried to consider four different case studies: looking backwards over two events that have occurred, looking forwards at one event that is certainly going to occur, and looking at an event that has a potentially high impact but low probability. I will cover those events during my contribution.
In the first case, we looked at the 2009-10 H1N1 flu pandemic, otherwise known as swine flu. In the second case, we looked at volcanic ash and the disruptions that occurred to our air space last April. Looking forward, we considered the potential for cyber-attacks, which are a very real threat. The event that has potentially high impact but low probability is the occurrence of solar flares, which are caused by adverse space weather and have the potential to disrupt electrical systems. Again, I will cover some of that later.
Hon. Members might wonder why we chose those four case studies. Obviously, the first two—swine flu and volcanic ash—were the most recent emergencies that the UK had experienced and were very high-profile events, both here and abroad. In addition, both events relied heavily on science and engineering to provide answers to very important questions—for example, who should be vaccinated against swine flu or how much volcanic ash an aircraft can fly through safely.
We then chose the other two risks that could lead to an emergency in the UK. People are obviously more familiar with cyber-attacks than with the space weather event. Fortunately, we have not encountered either on an emergency scale. However, the name of the game is to be prepared; we wanted to see whether the Government were prepared and what they were doing to be ready for potential events.
I would like to make a couple of personal observations. I welcome the degree of co-operation that we had from Government officials, particularly those from the Cabinet Office, the lead Department. I have been involved with issues to do with information assurance and the cyber security world for a number of years, so I found it very refreshing that there was an acceptance that such matters had to be dealt with on a much more collegiate basis than was historically the case.
These things do not just belong to Cheltenham and the dark arts down there; there are serious issues and we must engage every citizen in looking after their personal data and their security. A cyber-attack could clearly be targeted at something such as a bank or a utility, which could have a serious impact on the nation state. We are not talking about a traditional warfare target, but such an attack could nevertheless be very effective.
It is clear to me that the Government take planning for emergencies seriously and recognise the need to draw in scientific advice. However, it is never safe to say that there is no scope for improvement. Our inquiry identified some weaknesses that we regarded as serious. I will start at the beginning of the emergency planning process: the national risk assessment. That is a comprehensive and, in some parts, classified assessment of the most significant emergencies that the UK could face over the next five years. Its counterpart is the national risk register, which is the unclassified bit that gets into the public domain.
There are broadly three stages to the risk assessment: the identification of hazards, the assessment of risk, and risk comparison. If I were a fly on the wall in some Departments, I imagine that I could hear some very interesting discussions about what is scientifically plausible and what ought to go into the realms of science fiction. As Chair of the Select Committee, I get all sorts of letters from people who postulate things that do not quite add up to the laws of physics as I understand them, so I guess that the Government face the same problems.
For every risk that makes it on to the national risk assessment—whether we are talking about attacks on the infrastructure or pandemic disease—the Government produce a reasonable worst-case scenario, which is a prediction of the worst that might realistically happen, rather than a prediction of what will happen. Unsurprisingly, that is a difficult concept to convey to the public and the media.
The House must take seriously its responsibility to communicate issues of risk to the public and should work with communities to help to improve public understanding of what risks really are. Certainly, some of the red tops are not exactly famed for being proportionate and level headed in these circumstances—indeed, some of the broadsheets are not immune to criticism about being sensationalist when it comes to reporting risk. My first plea, to the broader community, the science community and journalists, is for there to be an improved and responsible way of communicating what risks actually are.
I will give an example of where the worst-case scenario can fall down. During the flu pandemic in 2009, the Department of Health held a press briefing. The media immediately reported the worst-case scenario—that there could be up to 65,000 deaths in the UK. At that time there had been 30 deaths, and at the end of the pandemic the total number was just over 450. That was a terrible tragedy for anyone involved, but the irresponsible communication of information by some journalists had the potential to cause panic. The result was a sense that things had been exaggerated by the Government.
No Minister, and no one else in a responsible position, could have withheld the 65,000 figure. The then Secretary of State for Health, my right hon. Friend the Member for Leigh (Andy Burnham), was provided with the data; he could not have withheld that information from the public, but we must ask ourselves whether there was a better way of communicating it. Focusing on the most likely scenarios might give us a better way of doing that. Yes, a Minister must say, “These are the extremes”, but we need to persuade reporters of the most likely scenario rather than the extreme possibilities.
It was not just the communication of the reasonable worst-case scenario that was the problem. The reasonable worst case was a 2% fatality rate, which meant that 2% of those infected would die. That was based on evidence from the 1918 Spanish pandemic. However, avian flu—bird flu—has an alarmingly higher fatality rate. We heard that it was simply not possible for the NHS to plan for such a scenario, so 2% was used. Our Science and Technology Committee was greatly concerned that the reasonable worst case was based not on the best available evidence, but on the need to determine how much to spend on planning.
I am pleased that the Government agreed that more could be done and that a review is under way to consider the reasonable worst-case concept. I hope that the Minister will tell us when we can expect the conclusions of the review and how the Government plan to try to develop the concept so that it becomes an accepted way of working aimed at reducing panic and concern when such events occur, as they inevitably will.
On the national risk assessment, we were disappointed to discover that the Government chief scientific adviser, Professor Sir John Beddington, had not been directly involved with the NRA, and had not had much involvement with the horizon scanning activities building up to it. We found that surprising; it appeared that the guy appointed to co-ordinate the best available science policy for the Government was not being brought in at the early stage of such an important field of activity. Of course, the co-ordination involves every scientific discipline; it is not just pure science. It involves statistics, engineering, behavioural science and a whole range of other issues. Science should be central to identifying, assessing and comparing risks.
Risk assessment must be informed by many sources of scientific advice, but clearly the Government’s own chief scientist should be part of the process at a high level. We came down quite strongly on this matter and proposed ways of increasing his involvement with the Cabinet Office and, specifically, the NRA. We have had partial success in getting our recommendations accepted by the Government.
As I said, the NRA is classified and not available to the public, so we ourselves cannot see how well science is being used. That was one factor influencing our recommendation that an independent scientific advisory committee on risk assessment should be set up to review the NRA. That would make Parliament and the public more confident that the process is as evidence-based as possible. At our follow-up evidence session in June, we heard from the Government that there will indeed be such a committee. I will be interested to hear from the Minister what progress has been made in forming that committee.
Risk assessment is the foundation underpinning a good emergency response. What happens when that foundation is missing was unfortunately demonstrated by the 2010 volcanic ash emergency; that took the Government by surprise, because it had not been considered a likely emergency and therefore little or no preparation had been done. It was not part of the NRA, and in fact the risk of disruption to aviation from natural hazards was removed from the NRA in 2009.
I have not been able to find anyone who admits to taking responsibility for that, but just a year later there was quite a serious emergency. That will tie back into some of the things I will be saying later about the need for greater transparency. Having spoken to a lot of earth scientists with expertise in the Icelandic area, I am certain that they would have been knocking at the Minister’s door as soon as they saw that such events were taken off the register. Within the earth science community, it has been an accepted fact that there was the potential risk of massive explosions in that area.
Once such information was in the public domain, I would have expected the Civil Aviation Authority to tie it together and come up with some conclusions and advice for the Cabinet Office. However, something went wrong. I do not suppose that I have to ask the question; I bet the Minister will not be leaving the issue off the NRA again. I suspect it will be there in the next published register later this year.
As a consequence of the lack of planning, airspace over the whole of the UK and many parts of Europe remained closed for a whole week while engineers figured out what was acceptable and what ash concentrations were safe for planes to fly through. At the time, the only available guidance was to avoid the ash: “If it is visible, do not fly through it”—hardly scientific and hardly a comforting policy for people sitting nervously in planes. It was a very expensive mess that cost airlines millions of pounds and stranded Britons all over the place all over the world.
When we were again disrupted by another unpronounceable Icelandic volcano in May, more specific guidance and protocols were in place to deal with it. That was a testament to the work of the CAA, which led to work within Europe to update the requirements for operating in and around volcanic ash.
Before I turn to how the Government respond to emergencies, I want to touch briefly on the issue of space weather. Changes in the sun’s atmosphere affect the space environment near to Earth. Events could involve injections of plasma—particles of radiation from the sun. Solar activity changes according to a cycle of approximately 11 years. Many scientists believe that we will have a solar maximum next year, coinciding with the Olympics. There is long probability, but there would be high impact if something went pear-shaped. If a small event occurs, taking out a few transformers and, just as the starter’s gun for the 100 metres is being fired, no transmissions occur from any broadcaster in the UK, we would be somewhat embarrassed. That is clearly a long probability event, but one of enormous political and economic significance. We cannot simply ignore these events.
One problem is that when one looks back at the history of similar events, comparisons are a little difficult because we have become so much more reliant on electrical gadgets and devices. I do not suppose there is anyone in the Chamber who does not have a mobile phone with them, and nobody in the Chamber who is not entirely reliant on electronic technologies. In 1989, an event caused Quebec to lose its power grid for approximately nine hours. That was a serious event, and one that could easily happen again.
The earliest well-documented event took place in 1859, recorded as the Carrington event, when telegraph systems were taken out. It disrupted systems all around the world, and that was before we became so reliant on electricity-based technologies. We do not really know what the effects of another Carrington event would be on, for example, the national grid, satellites, the global positioning system, computer chips or avionics. It is reasonably well known that some satellite technologies are built to higher standards now. I suspect that most of the military technologies that I have looked at have the capacity to be taken out of harm’s way, or are sufficiently well shielded, but an awful lot of infrastructure is not.
The Committee’s interest in space weather coincided with work that the Government were doing. Sir John Beddington had started work almost at the same time. Our inquiry kept being told that this was work in progress and that we should expect space weather to appear on the 2011 national risk assessment register. I would be grateful if the Minister could tell us whether that has happened.
No matter how good an assessment is, we cannot prevent some emergencies from occurring. In any emergency that requires scientific input, a scientific advisory group in emergencies is set up—its acronym is, appropriately, SAGE—to advise Government and Cobra, central Government’s crisis management committee. SAGE should be the funnel for scientific advice from all sources—I stress all sources. The membership of each SAGE committee will vary according to the emergency, but most members will be scientists. The Committee felt that improvements could be made in the pre-identification of possible SAGE members, at least for every risk that is on the current risk register. We felt that that could save valuable time in bringing the right people together should an event occur. Indeed, that recommendation was accepted by the Government.
SAGE is a relatively new mechanism. With every emergency for which a SAGE committee was set up, lessons have been learned and improvements made. Things are moving in the right direction. It was disappointing to find, at the start of our inquiry, that information on the SAGE committees for swine flu and volcanic ash was more or less hidden from public view. That does not help us learn lessons. We have to be totally transparent, returning to the points I made earlier. It is also quite odd, when you consider the importance of communication and openness in an emergency, that SAGE committees have not worked in an open manner.
We found other problems. The independence of SAGE from Government was ambiguous. Scientific advisory committees really should be independent of Government to ensure that their advice is impartial. We also heard concerns from some scientists who were members of SAGE committees. They felt unable to talk to the media, thus depriving the media access to the real experts. There are problems in communicating some of these issues, and some experts are very good at communicating risk to the public. All in all, the Committee was pretty unclear about the rules governing SAGE. Our recommendations can be summed up in two points: be more transparent; and publish guidance on how SAGE should operate and stick to it. That way we will know what to expect. We were told that guidance would be produced this summer; the Minister might like to update us on progress. Putting those concerns aside, overall SAGEs have been a useful mechanism for getting scientific advice to Government quickly. Adjustments need to be made, but we were not calling for a major rethink. Sometimes a subtly different approach is needed for different events.
Nine days after our report was published, a massive earthquake and tsunami hit the north coast of Japan, causing massive loss of life and severe damage to infrastructure. Japan will be dealing with the consequences of that tragedy for some considerable time. An immediate concern was the integrity of the Fukushima nuclear power station and the risks it posed to human health. We watched with interest as the UK Government and a new SAGE committee swung into action to assess whether there was a need to evacuate British nationals. This time—this relates to the point I made about lessons learned—the SAGE committee had a higher public profile. Sir John Beddington was very prominent in briefing both the media and Britons in Japan via teleconferences. A few months down the line, it is clear to me that the UK’s reaction has been proportionate and evidence based. SAGE played a crucial part in that. I would like to think that our work influenced the positive way in which the Government and SAGE worked during that emergency.
My final point is on cyber-attacks. We were slightly limited by the classified nature of some information, but we took some fascinating evidence in this case study. It was the only risk examined that could be the result of malicious human activity. The Stuxnet worm, which targeted Iran’s uranium-enrichment programme, was a real-life example of how organised and structured cyber-attacks on critical infrastructure could succeed, and cyber-technology, unlike some conventional weapons, can be copied.
Cyber-security has received a huge amount of attention recently, with the publication of the Government’s 2009 “Cyber security strategy of the United Kingdom”. The subsequent formation of the Office of Cyber Security and Information Assurance was welcome, because so many public and private bodies are tasked with ensuring our security in cyber-space. However, tasking a body with providing direction and co-ordination is pointless if it has no powers and insufficient funding. We recommended that the Government clarify the funding and powers of the new office. Again, we have not yet received a response and would welcome comments from the Minister.
I apologise for my fleeting visit to the debate. I am on a Public Bill Committee this afternoon but, as a member of the Science and Technology Committee, I thought it important to support the debate.
In terms of cyber-security, so much of the UK’s national infrastructure is dependent on the private sector, so one of the key tasks of the OCSIA is to work with those private sector defenders and providers of our national infrastructure, to ensure that they are well protected. One of the issues in Committee was what powers the OCSIA had to oblige those private sector providers to look after their cyber-security. Perhaps that is an area on which the Minister might enlighten the Chamber later.
I thank the hon. Gentleman who, in Chester, is my neighbour. He is always posing me challenging questions, but he makes a fascinating point. The threat to national security from cyber-attack is clearly as serious in the private sector as it is in the public sector, and probably more so. That is a great challenge. We cannot have a world in which everyone who worked in a bank would be security cleared to the level that the Minister’s staff are—that is not realistic and it could not be done for every utility. That is why extensive sharing of expertise across boundaries is necessary in the sector, to ensure that lessons from the public sector are learned in the private sector, and vice versa, including sharing information with academics.
The hon. Member for City of Chester must recall one academic witness, a man who was held in extremely high regard by the current Government because he was party to writing a paper for them, when they were in opposition. He said that he did not want to be security cleared, so there are some interesting dichotomies. The Minister needs to contemplate that problem and, I hope, answer the challenging question posed by the hon. Gentleman. In that complex world, without becoming obsessed by security clearance for everyone on the planet, how do we improve information sharing and expertise in and out of and across the boundaries between the private and public sectors?
Soon after the second volcanic ash event, when we were reflecting on the report and talking about some of the information, communication and technology issues, one of the officials said in a meeting I was at that, when the second volcano erupted, they reached for the Select Committee’s report to see how to handle things. I know that that was intended to butter me up a little—I welcome it—but, all in all, the Committee has done a sound piece of work which I hope is taken on board by the Government.
I hope that Members will agree that our inquiry on “Scientific advice and evidence in emergencies” continues to be pertinent to how disasters and emergencies, here or abroad, are handled by the Government. Last winter we had a resurgence of swine flu cases, and we are currently approaching the peak flu season this year again. This May there was another volcanic eruption, which affected our airspace briefly in Scotland and northern England. Severe weather is occurring more frequently, and last winter we had extraordinarily low temperatures that I do not recall having before. Also, as I said earlier, we are approaching the solar maximum. I do not want to scaremonger and create panic. What I want to do is to highlight the fact that the issue is live.
With the right processes in place, and good use of scientific advice and evidence, emergencies can be planned for and effectively managed and information can be communicated to the public. We all in the House would agree that it is our responsibility, collectively, to handle situations such as the ones I have described in a manner that crosses the political divide. I hope that the Minister will agree that we can all learn lessons from each other and we need better ways of working with outside agencies, whether that is people responsible for communicating information to the public or experts who can provide information. I hope that the House will take note of our report and that the Government will act positively on the outstanding issues I have listed.
My hon. Friend is right, and in the end we have to make a judgment and try to prepare in a proportionate way based on the best evidence available, while acknowledging that that evidence will not always be conclusive. The process set in place through SAGE will try to distil the best view, which is important.
A number of Members have raised points about the communication of risk, which is an important issue and difficult to get right. When communicating risk to the public, it is important not to scaremonger, make people agitated or cause them to behave in a way that is not reasonable. Nor should we devote resources to something in a way that cannot be justified. At the same time, we must never be complacent.
I have thought about the concerns raised in the report and by hon. Members during the debate about the concept of the reasonable worst case. It is difficult to get the form of words right. If the word “reasonable” is inserted, it sounds as if it is a situation that we think will happen. In fact, “reasonable worst case” is not what we believe likely to happen; it is the worst case possible if we remove situations that are absurdly improbable. Pitching that statement correctly is quite difficult.
A number of hon. Members mentioned the Blackett review that will be published in the next few weeks, which we will obviously consider. The Blackett panel looked at the concept of reasonable worst case, which it believes—as do the Government—that it is essential to consider when planning and building capability. It believes, however, that we must think about the use of that concept in communicating risk because it may be that the concept of the most likely case is more useful.
Governments will always be anxious about having a figure in their possession that they have not shared. That was the case with swine flu, and I understand the concern of the Health Secretary at that time. The Government did not want to suppress a figure that might have been arrived at properly, even though it proved to be way off beam. These difficult issues need to be tackled in a serious and measured way and it would be useful to have further discussion and debate once the Blackett panel has completed its review. We must get this issue right because, when emergencies happen—as they will—it is important to have some kind of shared understanding across the political spectrum, and between the Government, Parliament and the media, about the way the concepts in question have been used and the need for responsibility when dealing with facts and estimations.
My hon. Friend the Member for Croydon Central (Gavin Barwell), who could not stay for the end of the debate because he had to be elsewhere, talked about the figures changing in the course of the swine flu epidemic. The truth is that in an emerging epidemic, there are very few cases on which scientists can make assessments; there is very little epidemiology to go on. Arguably, it is better to be honest about the possible worst case and plan for the worst; and then if events turn out very differently, at least that is better than their turning out much worse than predicted. I was asked whether we had used the reasonable worst case approach for the Fukushima event. The answer is yes, that did happen.
On the difficult issues about trying to get right the communication of risk, I am grateful for the Select Committee’s insights. The Blackett panel will produce its conclusions in due course, and we will share them and continue to have discussions and debates.
I was asked what progress had been made in response to the concerns that the Select Committee raised, which I understand, about the role of the Government chief scientific adviser in national risk assessment. Work is under way to set up an independent scientific advice group for the NRA, which will be in place in time for the 2012 NRA. The draft 2011 NRA has been sent to the Government chief scientific adviser, and he will respond to me and my officials in due course. Obviously, it is important that that assessment has the benefit of his detailed scrutiny. We are taking the conclusions and recommendations in the Committee’s report seriously and acting on them.
The Chair of the Committee, the hon. Member for Ellesmere Port and Neston (Andrew Miller), asked when SAGE guidance would be published. We are aiming for later this year. We are building in steps that are being taken in the light of the inquiry and the reflections in this debate.
I was asked about transparency. We agree that SAGE should operate on the principle of openness and transparency. The membership, minutes and key scientific advice papers for all three recent SAGE activations, which were in relation to the Japanese nuclear event in and around Fukushima, the volcanic ash eruption and the swine flu epidemic, have all now been published online. Everything is being taken forward, I hope, in the right spirit.
My hon. Friend the Member for South Basildon and East Thurrock (Stephen Metcalfe) asked about international collaboration. We work closely with international organisations—the European Union, the UN and so on—and with global leaders in this field. For example, the Singapore Government are a serious leader in this area, and we work with them. We also work with other countries with which we share risks. For example, we work closely with the Netherlands on the risks associated with North sea flooding. There is also ad hoc joint work and research on community resilience and behavioural issues. We work on that with the United States, Canada and the Australians. International collaboration is therefore very important. There is a huge amount of expertise, and it is in the interests of all countries that we benefit from one another’s knowledge, expertise and assessments.
I was asked about volcanic eruption as a risk. I assure hon. Members that the possibility of volcanic eruption is certainly not being omitted from the 2011 NRA. There are two risks in the risk assessment, one of which is a severe, gas-rich volcanic eruption that could reach toxic levels at both ground level and flight altitude. Obviously, that is less likely to occur but would have very significant impacts. We acknowledge that the volcanologists are saying that the likelihood of further volcanic eruptions is higher. We are obviously taking that into account. There is a higher likelihood of a much less severe volcanic ash-rich eruption. A great deal of knowledge was gained from the experience of the eruption last year, and a lot of action has been taken on the back of that.
Before the Minister moves on, I am curious to know how information held in other Departments is brought in. Obviously, there is a significant role in some Departments through the Civil Aviation Authority and so on, but the Ministry of Defence also has enormous expertise. Years ago, I was in the Caribbean with the Royal Navy when the volcano on Montserrat blew. The helicopter pilot at that time said to me, “Mr Miller, you can’t get any closer to take photographs because these things fall out of the sky if they get the slightest bit of dust in their engines.” There is a huge amount of information that is very old, but that we have failed to centralise. What is the right hon. Gentleman doing to shake up other parts of the machinery to get all that information together?
That is a very good question. Are Government always perfect at ensuring that all the information and knowledge is harvested and garnered from all parts of Whitehall and well beyond, including all the agencies and organisations? No, not by any means. A big part of the role of my officials in the civil contingencies secretariat is to try to ensure that we bring that body of knowledge together as best we can. One would hope that in an event like the volcanic ash eruption, the Ministry of Defence would be intimately involved—I am sure that it was—in assessments and decision making. However, it is a perfectly good question. It will not always be perfectly answered, but we are conscious of the need to maximise the bringing together of all the knowledge on this front.
My hon. Friend the Member for South Basildon and East Thurrock and others talked about space weather. That is potentially a big hazard with really serious impacts. We need to deal with it in a thorough way. The truth is that more work is needed to understand what the wide range of impacts would be from a serious event. The Department of Energy and Climate Change is engaged with National Grid, the energy emergencies executive committee and the British Geological Survey to consider the implications of a severe space weather event for the electricity system as a whole, including the potential impacts on generator transformers and further consideration of the transmission network. We in the Cabinet Office will continue to work with other sectors that could be impacted to develop a more comprehensive understanding of the vulnerability. Work on that issue continues.
The only other time when there was a major event was in 1859—the Carrington event, which has been mentioned. That was a very different world. There have been other events, but they tend to be localised. The likelihood of such an event is therefore not high, but it is real and we need to address it in the best way we can.
My hon. Friend the Member for South Basildon and East Thurrock asked whether we were participating in the European Space Agency’s space situational awareness programme, which runs until 2012. We have subscribed to it. It defines the steps that need to be taken on space surveillance and space weather. The UK Space Agency will engage with the potential space weather user community and data service providers to assess the relative priority of funding space weather activities within the ESA space situational awareness programme. That will obviously need to be reconciled with competing demands for other programme opportunities and existing financial commitments, but no clear conclusion has yet been reached. However, we are very aware of the risk, and a great deal of work is going on in relation to it.
I turn to the question of cyber security, which is obviously a serious matter. It was identified in the strategic defence and security review as a high risk, and a significant budget has been attached to the national cyber security programme; as Minister responsible for the Office of Cyber Security and Information Assurance, I have oversight of that programme. Our approach is to ensure that we invest in building capability, as capability is relatively scarce. We have an affordable centre of excellence and expertise at GCHQ.
This is a question not only for the Government but for the whole economy. We discern a marked range in the degree of preparedness of private sector companies on cyber security. Some are highly developed, but it is not only companies focused on internet activities that are vulnerable; it goes much more widely than that. Some companies that ought to be concerned about cyber security do not take it as seriously as they should. Over the coming months, we will be encouraging them to address it seriously. It should be on the agenda of every risk and audit committee, to ensure that it is properly understood and dealt with.
In a few weeks’ time, I shall be publishing the Government’s cyber-security strategy and I hope that it will receive attention and be debated by the House. These are most important matters, and we must do our best to get them right.
I am fairly confident, following Sir Edmund Burton’s report on the missing Royal Navy laptop, that part of the Government’s response will be about awareness and the training of personnel. Will the Minister confirm that that will happen throughout the civil service machinery? It is no good saying that it belongs only to permanent secretaries or techies in the back room, because it affects us all. There has to be a serious campaign in the public sector to ensure that people understand how serious these challenges are.
The hon. Gentleman is right, and I do not dissent for a second. Most of it is about being reasonably alert and aware, and taking common sense steps, but higher levels of vulnerability to cyber attack and cyber crime require a highly sophisticated response coupled with great awareness and agility. Information assurance and not allowing data to go amiss are mostly to do with basic standards of care and alertness.
I am grateful to have had the opportunity to respond to the Committee’s thoughtful and serious report. It has been good to ventilate these matters. I assure the House and the Committee that we continue to take these matters seriously. We will continue to engage and interact with the Committee as we take these matters forward.
We have had a full and frank debate. I am informed that it can continue for another five minutes if the Committee Chairman wishes to raise any other matters.
I am grateful to all who contributed to the debate, including my hon. Friend the Member for Llanelli (Nia Griffith), the Opposition spokesperson, and the Minister.
To a great extent, this area transcends party politics. Frankly, given some of the surveys published today on the public’s perception of Members of Parliament, people might reflect on the fact that, just occasionally, we work in a collegiate manner towards a common goal. In this case, the common goal is improving safety and security for our citizens. It engages the best scientific brains, both here and further afield, and all political parties are committed to it as a serious priority. I hope that we can continue to work in this positive manner, and address some of the big questions and “what happens if” challenges thrown up by the national risk assessment.
A few detailed questions remain. Once the Minister has seen the transcript of our proceedings, I hope that he will do us the honour of providing a more detailed reply—something that is a little challenging in this environment. I hope that his reply will form the basis of a continued dialogue between the Committee and the Cabinet Office on this important work.
Question put and agreed to.