IT services companies and datacentres face regulation as cyber security bill reaches Parliament | Computer Weekly

"The Cyber Security and Resilience Bill (CSRB) aims to ensure critical services, including healthcare, water, transport and energy, are protected against cyber attacks, which cost the UK economy almost £15bn a year."

"They will be required to report potentially significant cyber security breaches to regulators and the National Cyber Security Centre within 24 hours, with a full report within 72 hours, and to notify businesses and individuals who use their services of the incident. Regulators will be given new powers under the bill to "designate" organisations that supply essential services, such as health diagnostics to the NHS or chemicals to a water firm, requiring them to meet minimum security requirements."

A new Cyber Security and Resilience Bill will regulate large organisations that provide IT services, including datacentres, to ensure adequate cyber security and resilience plans. The bill aims to protect critical services such as healthcare, water, transport and energy from cyber attacks that cost the UK economy almost £15bn a year. Medium and large IT services companies providing IT management, helpdesk support and cyber security to critical services will face regulation for the first time. Those organisations must report potentially significant cyber security breaches to regulators and the National Cyber Security Centre within 24 hours, supply a full report within 72 hours, and notify affected businesses and individuals. Government ministers will gain powers to require specific security steps where national security risks exist, regulators can designate essential service suppliers to meet minimum requirements, and public sector ransomware payments will be banned.

Read at ComputerWeekly.com