The National Cyber Security Centre (NCSC) states that UK organisations should prepare for an extended period of heightened cyber security threat. It has guidance for organisations on the steps to take to improve security.
The guidance is designed to be applicable to any period of sustained heightened cyber threat, including the one arising from Russia in light of events in and around Ukraine.
The NCSC says that the cyber threat to the UK remains heightened and they expect it to stay that way for some time.
The NCSC guidance aims to help organisations avoid complacency and staff burnout. It advises that increased workloads for cyber security staff over an extended period can harm wellbeing and lead to lower productivity, with a potential rise in unsafe behaviours or errors.
The recommended actions in the guidance include:
- following the NCSC's actions to take when the cyber threat is heightened guidance;
- revisiting risk-based decisions taken during the initial phase of heightened threat;
- empowering cyber staff to make day-to-day decisions about the threat response without requiring additional oversight;
- ensuring workloads are spread evenly across individuals and teams;
- ensuring frontline cyber staff can take breaks to recharge; and
- accelerating planned action to harden networks and boost defence capabilities. See: [Maintaining a sustainable strengthened cyber security posture - NCSC.GOV.UK](https://www.ncsc.gov.uk/guidance/maintaining-a-sustainable-strengthened-cyber-security-posture)
The government has published a raft of consultations on tax and business policies. It is worth being aware of these, as they are a good indicator of future policy direction likely to impact small businesses.
Employers may worry about the use of Non-Disclosure Agreements (NDA) following a series of press stories that have highlighted the abuse of the system.