40 Section 5 DEFEND (CNI), which provides essential services to the nation. Ensuring the CNI is secure and resilient against cyber attack will be a priority for the Government. This premium group also includes other companies and organisations, beyond the CNI, that require a greater level of support. They include: • the jewels in our economic crown – the UK’s most successful companies and also those that hold our future economic strength in the value of their research and intellectual property; • data holders – not just organisations that hold large amounts of personal data, but also those that hold data on vulnerable citizens here and abroad, such as charities; • high-threat targets – such as media organisations, where an attack could harm the UK’s reputation, damage public confidence in the Government, or endanger freedom of expression; • the touchstones of our digital economy – digital service providers that enable e-commerce and our digital economy, and who depend on consumer trust in their services; and • those organisations that, through market forces and authority, can exert influence on the whole economy to improve their cyber security, such as insurers, investors, regulators and professional advisors. 5.4.2. More needs to be done to protect these vital parts of our economy and support the organisations that heavily influence others. Our CNI – in both the private and public sector – continues to be a target for attack. Across these and many other priority sectors cyber risk is still not properly understood or managed, even as the threat continues to diversify and increase. National Cyber Security Strategy 2016 Objective 5.4.3. the UK Government, working with the Devolved Administrations and other responsible authorities where appropriate, will ensure that the UK’s most important organisations and companies, including the CNI, are sufficiently secure and resilient in the face of cyber attack. Neither the Government nor other public bodies will take on the responsibility to manage this risk for the private sector, which rightly sits with boards, owners and operators. But the Government will provide support and assurance proportionate both to the threat these companies and organisations face, and to the consequences of their being attacked. “Cyber security is key to unlocking innovation and expansion, and by adopting a tailored organisation and risk-centric approach to cyber security, organisations can refocus on opportunities and exploration. Building trust in a business that operates successfully within the Internet of Things (IoT), and that fully supports and protects individuals and their personal mobile devices (from a simple phone to a health care device, from smart appliances to smart cars), is a key competitive differentiator and must be a priority.” EY’s Global Information Security Survey 2015