London Creating a Government Cyber Unit for Centralized Response to Cyber Attacks

The UK Government has unveiled a new Cyber Action Plan aimed at strengthening the protection of public digital services and citizens’ personal data. The document was released alongside the second reading in Parliament of the Cybersecurity and Digital Resilience Bill. The total funding for the initiative exceeds £210 million, underscoring the priority of cyber security for London.

A key element of the Plan will be the creation of a new government cyber unit ­– the Government Cyber Unit. It will be responsible for centralized cyber risk management and coordination of response to incidents between ministries and agencies. The Unit’s task is to overcome the fragmentation of approaches to cybersecurity in the public sector and ensure rapid decision-making in case of large-scale cyberattacks.

The Action Plan is integrated into a broader strategy for the digital transformation of public administration in the UK, which involves moving most services online, reducing bureaucratic procedures, and improving convenience for citizens. The government estimates that the effective implementation of digital technologies in the public sector could deiver up to £45 billion in productivity gains.

Particular emphasis is placed on supply chain security, especially in the software sector. According to official data, nearly 60% of organizations in the UK have faced cyberattacks due to compromised software products or dependent suppliers. In response, the government is launching the Software Security Ambassador initiative to promote the implementation of the Software Security Code of Practice and the dissemination of industry standards.

Leading companies, including Cisco, Palo Alto Networks, Santander, and NCC Group, have already joined the program, which should strengthen cooperation between the public and private sectors. In the medium term, the government expects that the implementation of the plan will improve coordination and increase the speed of response to cyberattacks in the public sector.