What Are The Key Proposed Changes Expected In The Cyber Security And Resilience Bill?

Proposals for tighter cybersecurity law have been confirmed by the UK Government in a policy statement. The Cyber Security and Resilience Bill (the Bill) is expected later this year, bringing modernised and strengthened UK cyber defences to improve the resilience of UK critical infrastructure, supply chains, public sector services and the wider economy. The aim of the new law is to minimise the impact of cyberattacks on UK citizens and to improve economic growth.

Businesses managing and operating essential services (e.g. energy, transport, health, water) and digital services (e.g. cloud services, search engines) and managed service providers (or any business with critical digital infrastructure) will need to assess and potentially upgrade cybersecurity practices to ensure readiness for upcoming legislative change.