Member

This group of amendments raises a fundamental question which has echoes of the current debate on devolution and economic growth. Do we devolve responsibilities for cyber security to our 12 regulators, the majority of which are currently struggling to keep on top of their current remit, such as Ofwat and Ofgem, albeit with the support of the NCSC, which is a respected, but none the less advisory, body sitting within GCHQ or do we adopt what is internationally considered best practice, the centralised model, by setting up an OCR that has fit-for-purpose regulatory powers and do this not just in the interest of the 12 sectors, but to mind the many gaps that this Bill fails to address across both public and private sectors, especially small and medium enterprises, which are now almost all tech-enabled and exposed to cyber attacks, most of which go unreported and never touch the national statistics?