National Cyber Security Centre

Baroness Stuart of Edgbaston Excerpts

Monday 16th October 2023 Lords Chamber

[Lord Ahmad of Wimbledon (Con)]

My Lords, if the noble Lord reflects on the answer that I gave, he will see that I answered the question quite directly. The first point is, “Don’t pay”, because the experience is that there is no assurance. Of course, a small company will have limited resources, and some of the portals, information and websites, as well as the response that I have outlined, are designed to help exactly those kinds of small businesses in their response. However, one thing is very clear, whether it is within my department or the Home Office: that by paying such demands there is no assurance, for a small or a large company, that a ransom attack will not happen again.

[Baroness Stuart of Edgbaston (CB)]

I declare an interest as the chair of Wilton Park, an executive agency of the Foreign and Commonwealth Office. Small organisations, while they are not completely part of government, nevertheless provide some back-door entrance to government by some people with malign intent, and they carry quite disproportionate costs to ensure their cybersecurity. Have the Government given any thought to how they could support ALBs and executive agencies across government more comprehensively?

[Lord Ahmad of Wimbledon (Con)]

My Lords, I recognise the vital insights of the noble Baroness. In working across government, we also work to ensure that government systems, structures, departments and agencies are fully protected. As I said in my Answer, this is an ever-evolving and ever-challenging threat—what is good today needs to be adapted for tomorrow’s threats. Where specific issues arise, be they for small businesses or for agencies, we seek to provide the necessary focused support.