Member

The effect of these amendments would be to extend regulation to software developers, distributors and support providers who are not otherwise intended to be in scope. The approach that we are taking for software products—the software security code of practice—sets baseline expectations for organisations that develop and sell software. The Government are promoting the adoption of the software security code of practice by working closely with industry through the software security ambassador scheme. The scheme brings together industry leaders who are committed to championing the code and driving improvements to software security practices in their supply chains. Although the Government agree that software security is important, creating a statutory register of approved software providers could distort the market, restrict supply choice and introduce untested regulatory consequences that go significantly beyond the Bill’s risk-based approach. It could also create unnecessary barriers for innovative UK firms, start-ups and SMEs, potentially limit access to some of the best talent and reinforce the position of larger established providers.