The Network and Information Security (NIS) Directive is intended to create a base level of security for organisations that are operating essential services within the EU. 

The legislation came in on 6 July 2016 and became enforceable from 10 May 2018. The main sectors covered are energy providers, transport, banking, financial services infrastructure, health, water and digital infrastructure providers. 

Organisations who operate within these sectors are termed “operators of essential services” and must implement the provisions of the directive to form the required base level of security for those services.

According to research from the professional services firm KPMG, 39% of UK-based CEOs are convinced that a cyber-attack is inevitable, and on a global scale nearly half of CEOs agreed with this statement. KPMG surveyed 1200 CEOs from around the world, including 150 leaders from the UK, where they were asked to discuss company challenges and future plans.

In order to protect organisations against cyber-attacks, UK CEOS discussed how a durable strategy for their cyber security is essential, as according to 74% of UK leaders, cyber security is a trust enabler. Although only 39% believe they are “very well” equipped for when a cyber-attack does occur.  

KPMG’s UK vice chair, Bernard Brown discussed how:

In an effort to improve internet regulations, the government’s Home Office and the Department for Digital, Culture, Media and Sport (DCMS) are currently drafting legislation in order to regulate “social harms” online.

The proposed regulator has been labelled as the internet equivalent to Ofcom – the regulator of broadcasting, telecommunications and postal infrastructures. As similar to Ofcom, the regulation intends to include a mandatory code of practice for social media and websites. The Home Secretary, Sajid Javid and Culture Secretary, Jeremy Wright, are currently considering the terms of the Code of Practice. The terms are set to include age verification on social media sites, as well as a rule enforcing all sites to remove any harmful content within a specific time frame or instead face fines.

The Head of Ofcom, Sharon White, recently announced a call to action regarding the regulation of tech companies:

According to Action Fraud’s cyber statistics, there were 12,372 cyber-crime reports made between October 2017 and March 2018, which resulted in victims losing a total of £28 million.

Action Fraud, the national fraud and cyber-crime reporting centre is led by the City of London Police. As one of the founding members of the Global Cyber Alliance, The City of London Police also run Cyber Protect, which along with Action Fraud was put in place, in order to investigate, detect, and protect individuals and organisations from cyber-crime and fraud.

Action Fraud’s statistics show that out of the 12,372 cyber-crimes reports, 4,796 were reports of social media and email accounts being hacked, which resulted in victims losing a total of £11 million.

It is most likely that the reported cyber-crimes were committed by criminals unbeknownst to the victims, as statistics show that around 50% of cyber-crime and fraud is conducted abroad.

In relation to the Action Fraud statistics, The Temporary Commander, Pete O’Doherty of the City of London Police, stated the following: