Viscount Stansgate
Main Page: Viscount Stansgate (Labour - Excepted Hereditary)Department Debates - View all Viscount Stansgate's debates with the Cabinet Office
Amazon Web Services
Viscount Stansgate Excerpts(1 day, 23 hours ago)
Lords ChamberRead Full debate Read Hansard Text Watch Debate Read Debate Ministerial Extracts
Lord Leong (Lab)
My Lords, I thank my noble friend for those questions. There is no evidence that this was caused by any malicious activity, and we have to be very careful that we do not speculate otherwise. AWS has publicly stated that the outage was initially caused by an issue with its configuration of the domain name system, or DNS, and some wider related complications. Departments independently determine which suppliers to use based on their use cases. Some cloud providers are strategic suppliers, but departments make decisions on adoption based on not only reliance but cost, capability and their staff’s expertise. We are working to diversify the UK’s cloud ecosystem and encourage greater participation by UK-based and European providers, as well as promoting innovation through our digital infrastructure and cybersecurity programmes. At the same time, the NCSC offers advice and guidance on how businesses and organisations can make themselves more cyber resilient, and this advice is also broadly applicable to digital resilience issues.
As I mentioned in Oral Questions last week, businesses should also take it upon themselves to ensure that they have sufficient cyber resilience systems in place by ensuring that their software and hardware are up to date and, if they can, seeking certification so that their systems are Cyber Essentials certified. Businesses should also be encouraged to have a business continuity plan so that, if anything happens, they have a plan in place.
Viscount Stansgate (Lab)
My Lords, I congratulate my noble friend on his Question; I submitted exactly the same Question yesterday. Is it possible that some of the sites affected in the UK, including the GOV.UK portal, were not aware that the data was held in America rather than in the UK and that, therefore, when a problem arises as it did in East-1, or whatever it is called, on the east coast of America, they were not aware that we would be in this vulnerable position?