Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, what steps he is taking to improve cyber security (a) training and (b) awareness in public sector organisations.

Government and the wider public sector remain an attractive target to a broad range of cyber threat actors of every level of capability and motivation from nation states to cyber criminals.

In December last year, the UK and its allies exposed a series of attempts by the Russian Intelligence Services to target high-profile individuals and entities through cyber operations.

The Government Cyber Security Strategy (2022) includes as its key objectives 'protect against cyber attack', 'detect cyber security events', and 'develop the right cyber security skills, knowledge and culture' in order to ensure that the Government’s critical functions are cyber resilient.

The NSCS Active Cyber Defence (ACD) programme has several core services, including the Takedown Service and Protective Domain Name Service or PDNS. In 2022, the total number of takedowns conducted by the Takedown Service was 2.4 million. The same year, PDNS blocked over 5 million requests for domains associated with ransomware, a significant contribution to protecting UK organisations from this threat.

We have a comprehensive approach to attract and develop new talent, and to upskill cyber professionals. This includes the cyber apprenticeship and Fast Stream programmes. Cross-government awareness campaigns and training courses are available for all civil servants, including accredited and examination-based learning. We were recently recognised amongst the 2023 Top 100 Apprenticeship Employers nationally. We provide training for specific cyber roles and mid-career switchers with a high level of core skills.

At a national level, the Government is supporting the demand for skilled people in the strong and growing cyber industry with a diverse range of skills interventions. The Government is also looking at long-term solutions, including through the Digital and Computing Skills and Education Taskforce and support for the UK Cyber Security Council.