SOLACE

Cyber security must be managed and understood at all levels

It is not a question of if we will be threatened by a cyber attack, but when, writes Jo Miller.

As NHS systems were attacked this month, I could understand what our health colleagues were going through.

In 2015, Doncaster MBC was attacked by ransomware. The immediate priority was to invoke our cyber security incident response plan, meaning we shut down our entire system within 15 minutes. Due to our highly skilled response team quickly implementing our plans, we had fully recovered that evening, without losing any data.

Threats like these happen daily and they are becoming more sophisticated. Every business and organisation must be prepared and have the right systems and monitoring in place. Acting quickly is vital to minimise impact.

For councils and public sector organisations it is not a question of if we will be threatened by a cyber attack, but when. IT controls can help manage threats but we need to be vigilant and trained in how to stop this spreading. Cyber crime is here to stay – it generates vast sums of money for criminals with little risk or outlay.

Frequent emails go out to my staff to remind them not to open attachments if they don't know the source and all staff are encouraged to complete training modules on cyber security.

That afternoon, back in 2015, was testing in a range of ways. We were unable to use IT systems, emails and telephone systems. Communicating during an emergency is key, but how do you communicate when we have become so reliant on email, texts and telephones?

Notice boards were put up on all floors to provide updates. Staff cleaned out their lockers, got together, discussed current work and shared ideas.

Technical controls reduce risks but will never give us 100% security, and it's not just an IT issue. People are our weakest link and cyber criminals research social media to mine personal information.

Cyber crime is a corporate risk to be managed and understood at all levels, and that starts at the top.

People and data are our greatest enablers and our greatest assets. We must protect them both in terms of investment. None of this back office/front office distinction – they are different sides of the same coin.

We managed our attack well but we are not complacent. It may happen again and we are ready for it.

Jo Miller is chief executive of Doncaster MBC

SOLACE

Helping to deliver better vfm for the sector

By Caroline Wheller | 20 March 2025

Caroline Wheller says it is an ideal time for local government to explore innovative ideas such as working in partnership, and offers some examples of how th...

SOLACE

Why good annual reporting matters

By Steven Corbishley | 19 March 2025

Steven Corbishley says high-quality financial reporting not only supports accountability, it builds trust, strengthens confidence among stakeholders and prom...

SOLACE

Future Forum: Unitary workers 'grieving' loss of districts

By Martin Ford | 19 March 2025

North Northamptonshire Council chief executive Adele Wylie has urged those involved in reorganisation to act with ‘kindness’ and avoid rancour.

SOLACE

Striving for a step change on local statistics

By David Blackman | 19 March 2025

The Mayoral Data Council will provide a ‘unified voice’ in liaising with government departments. But delivering better partnership working across places call...

Popular articles by Jo Miller