UK Government Urges Leaders to Fortify Cyber Defences

To safeguard British businesses from the escalating threat of cyber attacks, the UK government has launched a comprehensive package of measures designed to bolster online defences.
The initiative, spearheaded by the Department for Science, Innovation and Technology (DSIT) and the National Cyber Security Centre (NCSC), aims to provide clear guidance and practical tools for directors and company boards to manage cyber risk effectively.
A new Code of Practice for Cyber Governance
At the heart of the initiative is the new Cyber Governance Code of Practice, unveiled by the Cyber Security Minister.
The Code outlines specific actions business leaders can take to protect their operations and secure future growth.
- Establishing a comprehensive cyber strategy to align cyber risk management with business resilience and growth objectives
- Fostering a cyber-secure culture throughout the organisation, ensuring employees at all levels know potential threats and their role in mitigating them
- Developing and implementing incident response plans to enable swift and effective action in the event of a cyber attack
The Code of Practice is complemented by online training resources and a detailed Board Toolkit, providing further practical guidance for implementation.
Cyber Security Minister Feryal Clark emphasises the critical importance of these measures.
She says: "A successful cyber attack doesn't just have the potential to grind operations to a halt — it could drain millions from the bottom line.
"If we want to drive the economic growth which is fundamental to our Plan for Change, then we need to stand side-by-side with British business leaders as they face down that threat.
"Our new Cyber Governance Code of Practice does exactly that — setting out in clear terms steps organisations should take to safeguard their day-to-day operations, while also securing the livelihoods of their workers and protecting their customers."
The Code of Practice is complemented by online training resources and a detailed Board Toolkit, providing further practical guidance for implementation.
Cyber security: A business-critical imperative
The increasing frequency and severity of cyber-attacks demonstrate the urgency of these measures.
Recent statistics reveal that a staggering 74% of large businesses and 70% of medium-sized firms experienced cyber attacks and breaches in the past year.
The financial impact is substantial, with cyber threats costing the UK economy an estimated US$28bn annually between 2015 and 2019.
Richard Horne, CEO at NCSC stresses that cyber security is no longer solely an IT concern but a fundamental business risk.
"In today's digital world, where organisations increasingly rely on data and technology, cyber security is not just an IT concern — it is a business-critical risk, on a par with financial and legal challenges," he says.
"From my experience working alongside senior leaders across both private and public sectors, I've seen first-hand how robust cyber governance is essential to drive resilience, support growth, and help ensure long-term success.
"I urge all board members to engage with the new Cyber Governance resources unveiled today and make cyber security an integral part of their governance. Cyber security is a leadership imperative."
Industry support and collaboration
The government's initiative has garnered widespread support from industry leaders and professional bodies.
Jonathan Geldart, Director General, Institute of Directors, says: "Cyber resilience is fundamental to organisational success and a core responsibility for boards and directors.
"The UK Government's Cyber Governance package provides valuable guidance to help business leaders effectively oversee cyber risk."
Jean-Philippe Perraud, CEO, NEDonBoard, Institute of Board Members adds: "Cyber resilience is fundamental to organisational success.
"The Cyber Governance Code of Practice sets a clear benchmark for boardroom engagement.
"NEDonBoard, Institute of Board Members, supports board members in upskilling for effective oversight of cyber risk, digital transformation, and resilience.
"We are proud to have been a key stakeholder and representative group, actively contributing to the development and refinement of the Cyber Governance Package.
"We support this important initiative by DSIT and NCSC and encourage boards to embed the principles of the Code and the pledge into their organisations' oversight and risk management practices."
Strengthening the UK's cyber defences
The launch of the Cyber Governance Code of Practice and supporting resources represents a significant step forward in enhancing the UK's cyber resilience.
By providing clear guidance, practical tools and collaboration between government, industry and professional bodies, the initiative empowers business leaders to manage cyber risk effectively and protect their organisations from the growing tide of online threats.
In addition to the Code of Practice, the government is pursuing legislative measures to strengthen cyber security across critical sectors.
Plans are underway to introduce legislation to Parliament later this year to protect the UK's supply chains, critical national services, and IT service providers and suppliers.
These measures mean that essential services, such as hospitals and energy suppliers, bolster their cyber defences.
Thomas Clayton, UK Head of Cyber, Zurich UK, notes: "Preparation is therefore vital, and as a result, the Cyber Governance package published by the UK Government, which brings clarity to the responsibility of boards and directors when it comes to governing cyber risk, is something we fully welcome and support."
The UK government's proactive approach to cyber security highlights the critical importance of protecting businesses and the economy from online threats.
The Cyber Governance Code of Practice and supporting resources and forthcoming legislation provide a robust framework for organisations to strengthen their cyber defences and build resilience.
By embracing these measures, businesses can safeguard their operations and livelihoods and contribute to a more secure and prosperous digital future for the UK.
Explore the latest edition of Cyber Magazine and be part of the conversation at our global conference series, Tech & AI LIVE and Cyber LIVE.
Discover all our upcoming events and secure your tickets today.
Cyber Magazine is a BizClik brand
- What is UK Government's Plan for National Cyber Defence?Cyber Security
- Why F5's BIG-IP APM Flaw Results in 'Cybersecurity Roulette'Cyber Security
- How JLR's Category 3 Cyber Attack Caused Production ShutdownCyber Security
- Verizon: AI and Human Error Fuel Mobile Security ThreatsTechnology & AI




