NCSC Annual Review 2024
Page 5 of 16
CEO foreword
It is with huge pride that I present the National Cyber Security Centre’s eighth Annual Review, and the first in my role as CEO.
In the few short months since I joined the organisation, I have been astounded by the breadth and depth of expertise and creativity within the NCSC. I am similarly struck by the magnitude of the challenge ahead, as we strive to ‘make the UK the safest place to live and work online’. That was the NCSC’s founding mission eight years ago, and it remains the same today. But we should be under no illusion that the challenge is getting harder.
We now find ourselves in a contest for cyberspace.
We are all using digital technology to our benefit: to drive growth, drive innovation, drive productivity, drive better public services, drive prosperity.
However, we face enduring threats from hostile states and cyber criminals looking to exploit our dependency on the technology that now underpins all aspects of modern life.
From ransomware attacks to AI-enabled intrusion, malicious actors are looking to maximise their disruptive and destructive efforts in an increasingly connected world.
In recent years, the NCSC has produced world-leading cyber security guidance and frameworks, such as our Guidelines for secure AI system development. Unfortunately, not enough organisations are implementing our guidance, nor applying these frameworks.
We have a responsibility to ensure that the whole of the UK rises to the challenge. We will encourage businesses across the UK to use the NCSC’s frameworks and guidance to drive up our national defences at scale. We will also help organisations of all sizes to be better prepared so they can quickly recover when cyber attacks do get through.
We will work with our partners across government to explore how we can influence the technology market to adopt more secure behaviours, which may include new legislation (such as the Cyber Security and Resilience Bill) and regulation to drive through the step change we believe is required to keep the UK safe.
Everyone has a role to play when it comes to improving cyber security. Whether you are working for the UK’s critical infrastructure ensuring that the lights stay on, or a parent unboxing and setting up your child’s tablet, we can all contribute to our national online resilience.
Since its inception, the NCSC has maintained that the UK’s collective cyber resilience depends upon everyone – from individuals and families to SMEs and large enterprises – playing their part. This starts by acknowledging the scale of the challenges we face and identifying the urgent interventions that we need to implement now. Only then we can stay ahead of the cyber criminals and hostile states that seek to do us harm.
I’m aware that the important work of the NCSC can only happen with the support from our friends across government, industry, academia, and international partners. I look forward to meeting more of you in the coming months and in Manchester for CYBERUK 2025.