Broadband: Cybersecurity
The question
To ask the Secretary of State for Science, Innovation and Technology, what steps his Department is taking to ensure broadband providers have robust governance and independent assurance arrangements in place, including internal audit, to support cyber resilience and protect digital infrastructure.
Answered by Kanishka Narayan
The Government keeps the financial health of the market under close review and Ofcom have powers to request financial information from providers. The Telecommunications (Security) Act 2021, and its associated Regulations and Code of Practice introduced a robust security framework requiring public telecoms providers to identify, reduce, and prepare for security and resilience risks.
We recently held a public consultation on proposed updates to the Telecommunications Security Code of Practice, which provides guidance on how public telecoms providers can meet their statutory requirements to secure their networks and services. These include requirements relating to reviews, governance and board responsibilities. Ofcom monitor and enforce these requirements.
In response to the consultation, the Chartered Institute of Internal Auditors raised the matter of independent assurance arrangements. We are now carefully reviewing all feedback to the consultation to ensure that any updates to the Code of Practice are appropriate and proportionate.
Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →