NCSC Annual Review 2021

Life today is dependent on technology. The hard definition between online and the real world is blurring. This Annual Review shows why world class cyber security, enabled by the expertise of the NCSC as part of GCHQ, continues to be vital to the UK’s safety and prosperity.

The cyber threat continues to grow. The past year saw the cyber attack on Microsoft, linked to a Chinese State-backed threat actor, and the SolarWinds attack, attributed to Russia’s Foreign Intelligence Service. Two of the most serious global cyber incidents we’ve seen in recent years.

In the UK there was an increase in the scale and severity of ransomware attacks, targeting all sectors from businesses to public services. In response, the NCSC has identified and mitigated numerous threats, whether committed by sophisticated state actors, organised criminal groups or lone offenders.

Of course, coronavirus continues to shape what we see. Cyber criminals are still exploiting the pandemic, while hostile states shifted their cyber operations to steal vaccine and medical research. The NCSC worked across the four nations to protect those involved in the UK’s response, including the NHS, medical research and the vaccine supply chain. Its impact has been substantial and far reaching at a time of global crisis.

The Government’s investment in cyber security means we know much more about the changing threats the country faces today than we did five years ago, when the NCSC was set up. And we are looking ahead too. We can see technology leadership is shifting eastwards. The key technology we will rely on for future prosperity and security won’t necessarily have democratic values at its core. We will work with partners around the world to help the UK and allies face this moment of reckoning.

Sir Jeremy Fleming, Director GCHQ