NCSC Annual Review 2022
Looking back at the National Cyber Security Centre's sixth year and its key developments and highlights, between 1 September 2021 and 31 August 2022.
Page 4 of 33
Director GCHQ
We must be able to trust the systems that connect us; that enrich our lives economically and socially. And that means that cyber security matters to everyone. This year’s Annual Review underlines this and shows how the NCSC, as part of GCHQ, contributes to the UK’s safety and prosperity. At a time of serious global economic and security risk, the need to make the UK the safest place to live and do business online is ever more relevant. I continue to be impressed by the expertise and dedication of our talented team.
Looking at the big picture, it is clear the cyber security threat is diversifying and evolving. We are seeing more states with cyber capabilities and more non-state actors joining the mix. We are also experiencing a shift in technology leadership towards the East. These factors and more have implications for the cyber security threats we all face.
The past 12 months have reminded us that global events have a direct impact at home. President Putin’s unprovoked war in Ukraine has involved a range of cyber activities that we, and partners, have attributed to Russia. Ukraine’s resistance to the illegal Russian invasion has been impressive, both on the battlefield and in cyberspace. It shows that online, the defender gets to choose how vulnerable they are to attack. And how greater cooperation between big tech companies and governments on security can make a difference. There are lessons here for us all.
In these challenging times, the UK’s cyber power, alongside the more traditional forms of diplomacy and statecraft, will play a vital role in maintaining national security and prosperity. To enhance current defences, we must increase our efforts to ensure UK businesses and Government improve levels of cyber resilience. We must continue to re-evaluate and reinvent cyber security to stay ahead.
And that’s precisely what the NCSC is doing. This is about better understanding. For example, through the Cyber Aware campaign, the NCSC is arming individuals and organisations with the knowledge they need to stay safe online, including against ransomware attacks. It’s also about actively reducing the threat, like the latest Active Cyber Defence service that the NCSC has brought online is doing. Early Warning is free and open to any organisation and it’s already sent six million monthly alerts to its 7,500 and growing members to inform them of threats against their networks so they can take action. By galvanising the cyber security community across the UK, the NCSC is driving a whole of society approach.
The global shifts we are witnessing will take decades to settle. Whilst I can’t predict how things will turn out, I can confidently say that cyber and cyber security will continue to be pivotal to our nation’s success. We are committed – in the NCSC and across the rest of GCHQ – to working tirelessly to ensure the country’s cyber security will be equal to the challenges of tomorrow.