Bottom line: The UK is taking proactive measures to strengthen its critical infrastructure supply chain security by restricting high-risk tech suppliers.
What's happening: The UK government has introduced amendments to the Cyber Security and Resilience Bill, which will give ministers new powers to restrict suppliers that pose a significant risk to the UK's critical infrastructure. The new provision is expected to come into effect on 01 March 2024. The proposed restrictions will target suppliers that have been assessed as high-risk by the National Cyber Security Centre (NCSC). These high-risk suppliers will be barred from providing services to critical infrastructure, including the National Health Service (NHS) and other essential public services.
What to do: Security leaders should review their current supplier assessments and ensure that they are up-to-date, with a focus on high-risk tech suppliers. They should also consider implementing robust supply chain risk management practices to identify and mitigate potential vulnerabilities.