The cyber security of the UK is a top priority for the Government, which is why we are investing £1.9bn in our five year National Cyber Security Strategy. The National Cyber Security Centre (NCSC) is the Government's centre of expertise in cyber security, providing a unified source of advice, guidance and support, including the management of cyber security incidents. When a significant cyber security incident occurs, the NCSC works collaboratively with Government agencies, departments and industry to assist the victim and ensure any lessons learned from serious incidents are actively communicated to the sector affected and fed into policymaking. A full investigation into the Yahoo security breach is taking place in the US, UK and Ireland.

The forthcoming General Data Protection Regulation will introduce a system of mandatory breach reporting. The Government is working with the Information Commissioner's Office and industry on how best to implement these changes.

Cyber security is recognised by the Government as a Tier One national security threat alongside deterring state-based threats and terrorism. In response to that threat and recognising the United Kingdom’s position as one of the most digitally advanced economies in the world, the Government is publishing its new five year National Cyber Security Strategy (NCSS) later this year.

The National Cyber Security Strategy defines the government’s vision and ambition for the future: a UK that is secure and resilient to cyber threats and sets out a comprehensive plan to better protect the UK from those threats. The new strategy includes delivering a new National Cyber Security Centre (NCSC), to take the lead in our ambitious plans to improve UK cyber security and involves creating a programme of active cyber defence which will have the ability to counter-attack in cyber space.

To fund the strategy, the Government announced that it has set aside £1.9bn of investment in cyber including a new National Cyber Security Programme (NCSP).

The Government has also put in place a wide range of cyber security guidance and support for businesses. This includes:

• free advice and online training on the gov.uk website;
• the ‘Cyber Essentials’ scheme, which shows all businesses how to protect against common Internet threats;
• the ‘10 Steps to Cyber Security guidance’, which shows large organisations how to manage cyber risk strategically;
• a cross-government National Cyber Security Programme funded campaign aimed at significantly improving the online safety, behaviour and confidence of consumers and small businesses;
• specialist advice and support for critical national infrastructure.

Industry must also act by ensuring staff have the right training, skills and tools to operate safely online.