UK public services told to treat cyber resilience as a board duty
Original title: Why cyber resilience is now a boardroom priority for UK public services
The NCSC handled 204 nationally significant incidents in the year to September 2025, about four a week.
Partner commentary argues UK public services must govern cyber risk at board level after machinery-of-government changes, including scrapping DSIT. It cites the 2024 Synnovis ransomware attack, which disrupted NHS pathology testing and delayed more than 11,000 appointments. It points to the Cyber Resilience Pledge, the NCSC Cyber Governance Code of Practice and the Cyber Security and Resilience Bill as raising leadership duties.
Unconfirmed: This is partner commentary using prior incidents and NCSC figures, not a new incident report.
- NCSC handled 204 nationally significant incidents to September 2025, up from 89.
- The 2024 Synnovis attack delayed more than 11,000 NHS outpatient and elective appointments.
- The Cyber Resilience Pledge asks boards to own security and join NCSC Early Warning.
- DSIT is being scrapped and its digital and cyber duties redistributed.
- Countries
- United Kingdom
From the original article
5 min read at theregister.comThe UK public sector has reached a cyber resilience inflection point. A new Prime Minister has taken office, and significant machinery-of-government changes have already been announced, including the scrapping of DSIT, the department that had become the center of government digital, technology and cyber policy.
By Richard Spalding · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.