The Integrated Review of Security, Defence, Development and Foreign Policy (the Integrated Review) makes clear that the UK’s ambition is to be a leading, democratic cyber power in an increasingly contested domain. Sustaining a competitive edge in cyber, through advancements in science and technology, is fundamental to achieving strategic advantage.
In an increasingly digitised world, cyber will become an indispensable means of protecting the UK’s security and prosperity. A fully integrated ‘whole-of-cyber’ approach to this domain is therefore essential.
The Integrated Review describes the development of a comprehensive cyber strategy, the formation of the National Cyber Force and a new ‘ministerial small group’ to coordinate activities. However, there is a risk that existing siloes will be reinforced without genuine integration across government, industry and academia.
The UK should go further to unify and align its whole-of-cyber approach, while building on existing partnerships with appropriate investment, to enable the UK to operate collectively and sustainably.
The UK can go further in its approach to cyber strategy and policy
The UK’s effectiveness as a cyber power needs to be more than the sum of each departments’ local strategies, however good they may be individually. Nor will infrequent releases of ‘grand narratives’ keep pace with real-world events. Coordinating and developing our cyber capabilities within a continuously evolving landscape will require constant engagement, adaptiveness, and an ability to bring diverse groups together, drawing on expertise from across the cyber ecosystem.
The public and private sector will need to work together to invest in, and develop, a sustainable cyber ecosystem.
The formation of a ministerial group to cohere cyber decision-making across government is an encouraging start and should provide the necessary leadership and oversight. In addition, the UK should invest in integration by supporting the ministerial group with an implementation group, at the pan-government level. This would bring experts from government, industry and academia together to make real the ‘whole-of-cyber’ approach that will inform ministerial decision-making.
Cyber spans traditional capabilities, so integration is key
Cyber, as a capability and operating domain, cannot yet be viewed in the same way as Air, Land and Maritime, which have established organisational homes and capability investment.
Excellence is not within the grasp of any single Government department, irrespective of how it is funded or organised. To deal with this, inter-departmental boundaries need to be seamlessly crossed without the friction of self-interest. The strategic, operational and tactical levers of power need to be integrated across government for the good of the nation. This will require senior leaders across government to understand how cyber capabilities can be used to maximise operational effect.
Cyber investment must develop and sustain skills
The Integrated Review proposes significant investment in science and technology. A significant proportion of this will need to be directed towards cyber for the UK to achieve its ambitions here. The public and private sector will need to work together to invest in, and develop, a sustainable cyber ecosystem. Talent is consistently in short supply, so all parties will need to collaborate to develop a scalable pipeline of cyber-skilled people to support the growth required.
You can read the rest of this article here.