UK lawmakers push for reforms to protect cybersecurity professionals
Written by Rebecca Uffindell Sun 22 Dec 2024
A coalition of UK parliamentarians has called for reforms of the 1990 Computer Misuse Act (CMA), arguing that the legislation no longer aligns with the needs of today’s cybersecurity landscape.
Led by Lord Holmes of Richmond, the group has urged the Government to address gaps in the CMA that hinder essential security practices. While originally drafted to prevent malicious misuse of computer systems, the CMA predates the internet era and fails to reflect the complexities of modern digital threats.
The coalition has proposed reforms to the CMA through amendments to the Data Access and Use Bill. These include introducing a statutory defence for cybersecurity professionals, protecting those who act in good faith to prevent cyberattacks or mitigate damage, even when explicit system owner consent cannot be obtained in time.
The amendments will be debated in the House of Lords Grand Committee, marking a pivotal moment to align UK cyber laws with the realities of the digital age.
“Updating the Computer Misuse Act is critical, but organisations must also prioritise building resilience into their networks. Proactive measures, such as implementing network peering and alternative traffic routes, are essential to mitigate risks and ensure continuity during cyberattacks or infrastructure failures,” said Richard Petrie, Chief Technology Officer at the London Internet Exchange (LINX).
Petrie stressed the importance of strengthening network defences to safeguard both critical infrastructure and individual organisations against the growing range of cyber threats.
The news comes a year after a parliamentary report found the UK Government is at risk of a catastrophic ransomware attack because of poor planning and lack of investment. The report, titled ‘A hostage to fortune: ransomware and UK national security’ said an attack could potentially bring the country to a standstill.
The findings by the Joint Committee on National Security Strategy said many areas of critical national infrastructure (CNI) in the UK are at risk of ransomware attacks, especially in sectors using outdated IT systems.
Written by Rebecca Uffindell Sun 22 Dec 2024