Government Looking to Promote Cyber Risk Management

The government is contemplating whether to establish new incentives for businesses that work to improve cyber risk management.

It released a statement in which it affirmed that the issue is being considered. The statement was made after an MPs report in June discussed the importance of protecting personal data on the web.

The Culture, Media and Sport Committee said in the report that chief execs should take the lion’s share of responsibility for cyber security within their firm. They added, however, that another individual within the business, possibly a chief of security of head information officer, should be responsible for the bread and butter cyber security tasks.

The government further said in the statement that it has provided encouragement to businesses to develop incident management procedures in preparation for a potential breach, and that firms should contemplate cyber security and data protection in their supply chain. It claimed that it was setting a good example by requiring its IT suppliers to possess certification under its own Cyber Essentials initiative.

The statement added:

“Under the EU General Data Protection Regulation (GDPR), data controllers and third party data processors will be jointly liable for breaches of the Regulation. The government is assessing the impact of the GDPR, following the EU referendum on 23 June and will take this issue into account when looking at next steps.”

Businesses indeed need to hire a cyber security professional to take care of the daily tasks related to cyber security. They need to take another look at their IT security recruitment plans and ask themselves whether or not they are doing enough to find this saviour.