Question to the Department for Digital, Culture, Media & Sport:

To ask Her Majesty's Government, further to the Written Answer by Lord Ashton of Hyde on 5 March (HL5690), whether they consider the National Cyber Security Centre guidance stated is sufficient to ensure that all sectors of industry and the general public are sufficiently protected against a hybrid threat; and if not, what additional guidance is planned.

The National Cyber Security Centre is focussed on the cyber security threat but works closely with its partners, CPNI and MOD, to ensure that the UK is protected against the hybrid threat. The NCSC seeks to provide actionable and accessible guidance and it also works closely with a range of key UK organisations to understand their systems, provide bespoke advice and ensure that cybersecurity is considered as part of new programmes and systems. The NCSC has also been strengthening the UK’s cyber defences through the Active Cyber Defence programme.

It is the responsibility of all organisations to ensure they are sufficiently cyber secure and, while the threat of cyber attacks cannot be eliminated completely, organisations can and should reduce the risks by acting on NCSC issued guidance on how best to defend against cyber attacks. This guidance is widely available to all and updated regularly.