NCSC Annual Review 2024
Page 3 of 16
Ministerial foreword
Cyber now underpins every aspect of everyday life. It is central to our economy and society, offering huge potential for the government’s number one mission for growth and prosperity. But alongside its huge benefits there are also risks and vulnerabilities, making it more important than ever that we secure our online world.
The government has taken a number of steps to strengthen our national security in the cyber realm, but we can’t do it alone. We need businesses and other organisations to boost their own cyber security where they can. While we have made significant progress, this report shows that the cyber threat is dynamic and grows more complex each year.
As this report shows, while AI presents huge opportunities, it is also transforming the cyber threat. Cyber criminals are adapting their business models to embrace this rapidly developing technology - using AI to increase the volume and impact of cyber attacks against citizens and businesses, at a huge cost. Meanwhile the proliferation of advanced cyber intrusion tools is lowering the barrier for entry to criminals and states alike.
We need to combat these threats and increase our overall resilience. One key way of doing this is by driving up the adoption of our “Cyber Essentials” scheme; stats show those businesses who implement Cyber Essentials are 92% less likely to make a claim on their cyber insurance. We are also working closely with businesses and industry through the National Cyber Security Centre and the National Protective Security Authority to offer practical ways that organisations can strengthen their own security and help defend the nation from cyber attacks.
Developing international partnerships is a priority and the government is strengthening relationships with countries around the world. You’ll see in this report how NCSC and UK law enforcement are working with partners internationally to counter the threat from cyber crime. We are also disrupting malicious cyber actors emanating from hostile states. In October, we sanctioned 16 members of the prolific Russian cyber crime gang Evil Corp, delivered in coordination with the US and Australia.
We know we cannot keep pace with the threat or seize opportunities without a skilled and professionalised workforce that represents the breadth of talent across the UK. The NCSC has significantly contributed to increasing diversity, especially through the CyberFirst Girls Competition. But there is much more to do - including by increasing interest in the computing curriculum and plugging the cyber skills gap.
As ever with cyber, new challenges will arise as the threat continues to evolve.
The UK has a world-class reputation in cyber, and we are determined to stay one step ahead - remaining alive to the threats for the UK while embracing the benefits of the digital future.