The UK's New Cyber Security And Resilience Bill

The UK government has recently introduced the Cyber Security and Resilience (Network and Information Systems) Bill to Parliament, with the objective of strengthening the UK's defences against cyber threats to systems most critical to daily life. Once in force (many of the substantive reforms will require secondary legislation to be brought into effect), this legislation will extend direct regulation to a broader range of organisations underpinning essential services and key digital services in relation to cyber compliance – including data centres, managed service providers and specifically designated "critical suppliers". It will also expand incident reporting obligations and significantly enhance the enforcement powers of regulators. This briefing provides an overview of the key changes presented by the Bill.