House of Commons · Written Ministerial Statement
Second Post-Implementation Review of the Network and Information Systems Regulations 2018
04 July 2022 · Department for Digital, Culture, Media and Sport
Proposed by Julia Lopez Con Hornchurch and Upminster
Summarised by AI from the official record, so it can contain mistakes.
At a glance
Key points
- Julia Lopez is publishing the second post-implementation review of the Network and Information Systems Regulations 2018
- The Government will retain the Regulations to continue encouraging organisations to enhance cyber security
- The report includes recommendations from a public consultation on proposed cyber security legislation
Issue summary
Julia Lopez is publishing the second post-implementation review of the Network and Information Systems Regulations 2018, which assesses their impact and effectiveness since their implementation.
Action requested
The minister announces that the Government will retain the Regulations to continue incentivising organisations to improve cyber security. The report also recommends changes based on a public consultation on proposals for cyber security-related legislation, with outcomes expected later this year.
Key facts
- The Network and Information Systems Regulations came into force in May 2018.
- The review concludes that the Regulations have driven improvements to the security of regulated organisations by increasing prioritisation of cyber security at senior levels and improved incident response management.
- Recommendations for changes to strengthen and future-proof the regulatory framework were included in a public consultation on proposals for cyber security-related legislation, which will be published later this year.