NAO warns that UK government doesn't know how vulnerable its IT systems are

The National Audit Office reports that the UK's cyber threat level is severe and escalating, identifying significant vulnerabilities in 58 key IT systems and a lack of knowledge on 228 legacy systems. The government’s efforts to improve cybersecurity, initiated in January 2022, have fallen behind, affected by a critical skills shortage, with one-third of cyber roles unfilled or temporarily staffed. Experts stress the urgent need for increased investment in cybersecurity to enhance resilience and protect public services from frequent attacks.

The risk of cyber attack is severe, and attacks on key public services are likely to happen regularly, yet the government's work to address this has been slow.

For there to be 58 critical systems with significant gaps in cyber resilience and over 228 legacy IT systems unassessed should be deeply concerning to everyone.

Read at ITPro