80
Annex 3
HEADLINE IMPLEMENTATION PROGRAMME
Strategic outcomes
Indicative success measures (to 2021)
Contributes to
7. All organisations
in the UK, large
and small, are
effectively
managing their
cyber risk, are
supported by
high quality
advice designed
by the NCSC,
underpinned by
the right mix of
regulation and
incentives.
• We understand the level of cyber security across the CNI,
and have measures in place to intervene, where necessary,
to drive improvements in the national interest.
• Our most important companies and organisations
understand the level of threat and implement proportionate
cyber security practices.
• The UK economy’s level of cyber security is as high as, or
higher than, comparative advanced economies.
• The number, severity and impact of successful cyber
attacks against businesses in the UK has reduced,
because cyber hygiene standards have been applied.
• The UK has an improving cyber security culture, because
organisations and the public understand their cyber risk
levels, and understand the cyber hygiene steps they need
to take to manage those risks.
DEFEND
8. There is the right
ecosystem in the
UK to develop and
sustain a cyber
security sector
that can meet our
national security
demands.
• Greater than average global growth in the size of the UK
cyber sector year on year.
• A significant increase in investment in early stage
companies.
DEVELOP
9. The UK has a
sustainable supply
of home grown
cyber skilled
professionals to
meet the growing
demands of an
increasingly digital
economy, in both
the public and
private sectors,
and defence.
• There are effective and clear entry routes into the cybersecurity profession, which are attractive to a diverse range
of people.
• By 2021 cyber security is taught effectively as an integral
part of relevant courses within the education system, from
primary to post-graduate level.
• Cyber security is widely acknowledged as an established
profession with clear career pathways, and has achieved
Royal Chartered Status.
• Appropriate cyber security knowledge is an integral part
of the continual professional development for relevant
non-cyber security professionals, across the economy.
• Government and the armed forces have access to cyber
specialists able to maintain the security and resilience of
the UK.
DEVELOP
National Cyber Security Strategy 2016