The UK’s cyber strategy has lost momentum. While in many ways the UK continues to invest in and operate as a ‘cyber power’, successive governments’ approach to national cyber resilience has struggled to keep pace with technological and political shifts and the threat posed by state and criminal actors. Many officials in the UK system recognise the nature of the challenges the country faces and the need for change. However, they have found it difficult to translate their own understanding of the problem into the kind of actions that could raise the bar for cyber security and resilience at sufficient scale. The result is that the UK’s approach continues to largely rely on market forces to fix systemic technological and cyber security challenges. This is no longer sustainable when ransomware gangs repeatedly hold our essential services and flagship businesses to ransom.
A Crossroads for UK Cyber Strategy | Royal United Services Institute