National Cyber Security Centre

Lord Purvis of Tweed Excerpts

Monday 16th October 2023 Lords Chamber

[Lord Ahmad of Wimbledon (Con)]

My Lords, I recognise the vital insights of the noble Baroness. In working across government, we also work to ensure that government systems, structures, departments and agencies are fully protected. As I said in my Answer, this is an ever-evolving and ever-challenging threat—what is good today needs to be adapted for tomorrow’s threats. Where specific issues arise, be they for small businesses or for agencies, we seek to provide the necessary focused support.

[Lord Purvis of Tweed (LD)]

My Lords, I have visited the centre and greatly admire the work of the whole team. The public and the private sector should adhere to its advice. The Government have consulted on prohibiting payments to ransomware. The Minister and I well know that the source of many such attacks is Russia and, currently, Iran. Does it not sit ill that businesses are only being told not to pay ransomware, rather than having a legal prohibition, when that money will end up in Tehran or Moscow?

[Lord Ahmad of Wimbledon (Con)]

My Lords, the noble Lord is quite correct and we have often discussed these issues and challenges. The mitigations we have put in and the advice we provide are all part of an overall package but, as I am sure he will agree, the challenge is that we also need sharp-end sanctions against these states. As I know from my experience at the Foreign Office over the last few years, we never used to call out or challenge state actors for cyberattacks. We now do so. The two countries the noble Lord named—Russia and Iran—are very much part of our focus. I am sure he will acknowledge that we have imposed cyber sanctions on Russia.