Businesses Face Fines If Cyberattack Causes ‘Essential’ Service Outage

‘Essential’ infrastructure providers, such as those in utilities, health, transport and communications, could be fined as much as £17 million or four percent of their global turnover, if inadequate security policies lead to an interruption in service.

The measures are part of a Department for Digital, Culture, Media and Sport (DCMS) consultation on how to implement the Network and Information Systems (NIS) directive from next year and are separate to the proposed Digital Protection Bill, which covers data loss, announced yesterday.

The Department for Digital, Culture, Media and Sport (DCMS) said the fines would be a last resort and would not apply to those who had taken every conceivable measure yet still suffered a cyberattack.

Cybersecurity fines

It said businesses should have policies and technologies in place to minimise risk, prevent attacks and failures, detect and monitor threats, and to educate staff. It also said organisations should report incidents as soon as possible and have appropriate recovery systems in place.

The same prinicples must be applied to other threats to IT systems such as power outages, hardware failures and environmental hazards.

“We want the UK to be the safest place in the world to live and be online, with our essential services and infrastructure prepared for the increasing risk of cyber attack and more resilient against other threats such as power failures and environmental hazards,” said Minister for Digital Matt Hancock.

Loading ...

“The NIS Directive is an important part of this work and I encourage all public and private organisations in those sectors to take part in this consultation so together we can achieve this aim.”

The National Cybersecurty Centre (NCSC) has welcomed the development, which is part of the government’s £1.9 billion National Cybersecurity Strategy.

“We welcome this consultation and agree that many organisations need to do more to increase their cyber security,” said NCSC CEO Ciaran Martin.

“The NCSC is committed to making the UK the safest place in the world to live and do business online, but we can’t do this alone. Everyone has a part to play and that’s why we since our launch we have been offering organisations expert advice on our website and the Government’s Cyber Essentials Scheme.”

Quiz: What do you know about cyber security in 2017?

Steve McCaskill

Steve McCaskill is editor of TechWeekEurope and ChannelBiz. He joined as a reporter in 2011 and covers all areas of IT, with a particular interest in telecommunications, mobile and networking, along with sports technology.

Recent Posts

Is the Digital Transformation of Businesses Complete?

Digital transformation is an ongoing journey, requiring continuous adaptation, strong leadership, and skilled talent to…

18 hours ago

Craig Wright Faces Contempt Claim Over Bitcoin Lawsuit

Australian computer scientist faces contempt-of-court claim after suing Jack Dorsey's Block and Bitcoin Core developers…

19 hours ago

OpenAI Adds ChatGPT Search Features

OpenAI's ChatGPT gets search features, putting it in direct competition with Microsoft and Google, amidst…

19 hours ago

Google Maps Steers Into Local Information With AI Chat

New Google Maps allows users to ask for detailed information on local spots, adds AI-summarised…

20 hours ago

Huawei Sees Sales Surge, But Profits Fall

US-sanctioned Huawei sees sales surge in first three quarters of 2024 on domestic smartphone popularity,…

20 hours ago

Apple Posts China Sales Decline, Ramping Pressure On AI Strategy

Apple posts slight decline in China sales for fourth quarter, as Tim Cook negotiates to…

21 hours ago