Strengthening cyber resilience central to the ICO's new corporate strategy

In a blog article on LinkedIn, Ian Hulme, Interim Executive Director of Regulatory Supervision at the Information Commissioner's Office (ICO), discusses why strengthening cyber resilience is central to the regulator's new draft corporate strategy. Hulme writes that as society, our jobs, and public services become increasingly digital, the amount of personal data we share will continue to grow.

Over 600,000 UK organisations reported personal data breaches last year, costing the economy more than £14.7 billion. Hulme pointed to the 2024 Transport for London cyberattack, which impacted roughly 10 million people and recently resulted in prison sentences for two hackers, as one of the largest attacks in UK history.

Hulme stressed that cyberattacks severely damage public trust, strip individuals of control over their personal data, and disrupt access to critical medical and financial services. To address these risks alongside the incoming Cyber Security and Resilience Bill (CSR), the ICO will focus regulatory efforts on high-risk areas, enhance internal skills, and provide targeted sector guidance. 

While acknowledging that not every breach can be prevented, the ICO aims to help organisations implement basic security protections, support UK economic growth, and hold negligent or irresponsible entities to account.

Training Announcement: The BCS Foundation Certificate in Information Security Management Principles (CISMP) is an entry-level programme aligned with ISO/IEC 27001 and Cyber Essentials that examines the fundamental concepts, technologies and principles of information security management. It provides attendees with practical knowledge of key concepts and techniques in risk management, security operations, and technical, physical, and environmental security. In addition, CISMP addresses legal and regulatory requirements, business continuity and disaster recovery planning, and emerging technologies. Find out more.