The UK Government has published a proposed code of practice on cyber governance and called for views on the same.
The proposed approach of the code is to “bring together critical governance areas that directors need to take ownership of in one place, in a form that is simple to engage with”.
The code is built around 5 principles:
- Risk management
- Cyber strategy
- People
- Incident planning and response
- Assurance and oversight
The government is calling for views in relation to how the code is designed, what can be done to drive adoption of the code and the possibility of an independently assessed assurance process against the code.
The proposed code can be found here.
