Strengthening Our Digital Defences: Why the Cyber Security and Resilience Bill Matters

The recent cyber incidents affecting major UK retailers like M&S, Co-op, and potentially Harrods aren't isolated events—they're warning signs.  

As an officer of the APPG for Cyber Innovation, I'm increasingly concerned about how our economy operating increasingly online, and offering digital services make us vulnerable to threats that can impact our national security, economic stability, and everyday life. 

These attacks highlight vulnerabilities that even established businesses face, exposing risks to our National Critical Infrastructure, economy, jobs, and growth. With our financial systems, essential services, and business operations now predominantly digital, the stakes have never been higher. 

Last week I chaired a roundtable on cyber security and resilience hearing from across the sector to inform the APPGs work. The voice was clear – cyber security is national security and we all need to be paying attention. 

This is precisely why I strongly support the new Cyber Security and Resilience Bill. Its key provisions will: 

• Extend oversight to managed service providers, acknowledging their crucial role in organizational resilience 

• Address supply chain vulnerabilities by designating 'critical suppliers' and enforcing robust standards 

• Require faster, more transparent incident reporting to enable early warnings and swift action 

• Establish clear, enforceable standards with board-level accountability 

The industry's overwhelming support for this legislation affirms we're moving in the right direction. But legislation alone isn't enough—we must elevate cybersecurity's importance across all sectors, including through the upcoming Audit Reform and Corporate Governance Bill. 

In my role on The Business and Trade Select Committee I have put forwards the importance of corporate governance around cyber security as a key area to explore in our upcoming inquiry ahead of the Audit Reform and Corporate Governance Bill to ensure that we legislate for robust governance mechanisms to protect businesses and their customers. 

As our dependence on digital infrastructure grows, so must our vigilance against evolving threats. The time to build a more trusted, professional, and resilient digital ecosystem is now.