The body will deal with “cybersecurity incidents” of national significance. It will also provide advice and alerts on cyber-threats to government, industry and academia. Speaking at the launch, Cabinet Office Minister Francis Maude said that 93% of large corporations had had “a breach” over the past financial year. The attacks cost on average between £450,000 and £850,000, he added. The minister also repeated the claim that one London-based company had suffered a security breach which cost it “£800m worth of revenue”. But, he said, cybersecurity also presented an opportunity. It was “an essential feature of – and a massive opportunity for – the UK’s economic recovery”. Many countries around the world now have their own CERT, a crucial component in the sharing of information to prevent cyber-attacks. ‘A milestone’ The government says it has allocated £860m to the UK’s cybersecurity efforts. However, figures were not available for the current budget specifically for CERT-UK, which will be based in London and will consist of a team of 55 people. According to its website, cert.gov.uk, CERT-UK would issue an alert and appropriate guidance in the exceptional event of a critical national cybersecurity incident. Providing advisory notices of “cybersecurity issues being detected across government, industry or academia” would be another function. However the organisation has no law enforcement role or powers – its primary role is co-ordination and information-sharing. Although CERT-UK had its official launch today, director Chris Gibson, formerly the director of e-crime at global bank Citigroup, was appointed in November and work has been in progress for some months. A particular focus of the organisation will be the protection of companies seen to be part of the critical national infrastructure, such as banks, and power generation and distribution firms. National Grid spokesman Steve Collins described the launch of CERT-UK as a “milestone”. It will also provide a single point of contact for co-ordinating international responses to computer security incidents – a move welcomed by other countries’ cybersecurity teams. Francis Maude said £860m had been allocated to cyber-defence:
