Of all the risks that this country faces there are none that are evolving more rapidly than those in the cyber domain.
Have more sophisticated tools
To target more people
Protecting the public from cyber attack is a matter of theutmostimportance.
Lets be clear whats being targeted here.
The critical services that government delivers:
Our public finances
Our roads and railways
Our health service
Our armed forces
Even the heart of central government itself.
Of all the vaults that cyber criminals are desperate to crack into
this one contains some of the greatest rewards.
Thats why we see so many attempts to breach our digital defences.
Last year, 40 per cent of the attacks addressed by the National Cyber Security Centre were against the public sector.
In a world where the new frontline isonline
the people in this room are manning the barricades to keep us safe and secure
and for that I want to say thank you.
Despite the challenges we face, our cyber defences are stronger than ever.
Since it was published two years ago, the Government Cyber Security Strategy has been a game-changer.
Work is well underway to ensure that governments most critical functions are significantly hardened to cyber attack.
And we have established ambitious targets that will seeallgovernment organisations made resilient toknownvulnerabilities and common attack methods.
Through GovAssure - which I launched in April - we have transformed the oversight of governmental cybersecurity
And the new Government Cyber Coordination Centre - better known as GC3 is bringing together a community of cyber defenders from across government
sharing best practice
and showing that a whole of government approach is not a slogan, its a reality.
Working together with the National Cyber Advisory Board (which I Chair)
and of course the National Cyber Security Centre.
All of you play a crucial role in iterating the strategy
and ensuring it is implemented right across Government.
Your work never stops because the risk of attack never stops.
The threats we face are increasing and the nature of those threats is evolving.
Technologies are developing at an exponential rate
and have lowered the bar for hostile actors states and criminals.
The biggest cyber threats are not just to our public services but the democratic means by which we deliver them.
Some states are likely to be harnessing significantly more sophisticated technology to sowconfusionanddissensionandchaosin our society.
Malicious actors continue to target high profile people within the political process.
This is not an abstract possibility. We have already seen it
In Ukraine - with deep-fakes of President Zelensky
In the US - whereIranianhackers have been indicted for undermining voter confidence and sowing discord
And here in the UK - with our Electoral Commission targeted by a complex cyber attack.
As I warnedat CYBERUK in Belfast in April
the greatest risks still emanate from the usual suspects
China, Iran, North Korea, and Russia.
But they are increasingly using Wagner-style sub-state hackers to do their dirty work.
Today in concert with our Five Eyes and Euro-Atlantic partners.
I can tell you that a unit within the Russian Federal Security Service, known as Centre 18, has been behind sustained hostile cyber operations
aimed at interfering in parts of the UKs democratic processes
This has included targeting members of parliament
Civil servants, think tanks, journalists, and NGOs
through a group commonly known as Star Blizzard.
This group, operated by FSB officers, has also selectively leaked and amplified information designed to undermined trust in politics, both in the UK and in like minded states.
A senior representative of the Russian government has been summoned to the Foreign Office this morning and appropriate sanctions have been levelled.
Our political processes and institutions will continue to endure in spite of these attacks.
But they serve to prove that the cyber threat posed by the Russian Intelligence Services is real and serious.
It is a stark reminder that
as we in government developourcapabilities
so do our adversaries, and those who do their bidding.
We are in acyberspace race
them to develop the tools to do us harm
us to build the defences needed to protect against their attacks.
Next year, 3 billion people in 40 countries will head to the polls
and it is afactthat hostile state actors will continue to seek to undermine these collective expressions of democracy
because they fear the freedoms they represent.
We must - all of us - do all we can to resist.
There are two main ways in which we can get ahead:
Strengthening our cyber security systems
and improving our skills.
First, our systems.
It wasnt that long ago that the government was still using fax machines.
I worked for the administration that helped to bring Whitehall into the digital age
and made our services digital by default.
The challenge is to make those digital systems secure by designand to embed effective cyber security practices into our digital delivery.
Thats why I am announcing today that we will make securityeveryonesresponsibility
and make secure by designmandatoryfor central government organisations.
This approach is already inspiring our partners around the world
and, like our earlier digital revolution, is likely to beemulatedaround the world.
Your role in embedding this approach at home will be crucial.
Then there is the question of skills.
In this room we have a wealth of deep technical expertise
and we have the ability to share and collaborate with our international partners.
But we need theexpertsof the future to be coming up, through that pipeline, to meet thechallengesof the future.
In the UK, as around the world, the shortage of cyber skills affects both the public and private sectors.
It is estimated that we have a shortfall of around 14,000 professionals.
and that shortfall is particularly stark in the public sector.
As one of the largest employers of cyber security experts, the governments actions can make a real difference to the makeup of the national profession.
So we have launched apprenticeship and fast stream programmes focused specifically on finding and developing cyber talent.
This is the new frontline.
And we must form a united front
government, business, academia, individuals, all coming together to pre-empt and ward off these risks.
Not just whole of government - but whole of society.
It is whatwehave that our adversaries and their agents lack:unity.
And there are huge opportunities in that
particularly for our entrepreneurs and innovators.
Theywill develop the defensive technologies that will protect not just this country but the world.
Britain has the opportunity to lead in tech, in AI and in cyber
because thebestplace in the world to do business must also be thesafestplace in the world to do business
and together we can make that a reality.