The United Kingdom is set to increase comprehensive cybersecurity funding and investment by almost $3 billion in a new cyber defense plan that includes offensive capabilities, the government said Nov. 17.
Chancellor of the Exchequer George Osborne announced the funding in a speech at the Government Communications Headquarters (GCHQ), the British organization responsible for information assurance and signals intelligence.
Osborne noted Prime Minster David Cameron appointed him to chair the government’s committee on cyber earlier in 2015 and that the government has decided to make cybersecurity a top priority.
In the government’s Spending Review, Osborne added a provision to nearly double the government’s investment to protect the United Kingdom from cyber attacks and to develop sovereign capabilities in cyberspace, totaling over $2.9 billion over five years, he said.
If you add together the spending on core cyber security capabilities, protecting our own networks and ensuring safe and secure online services, the government’s total cyber spending will be more than £3.2 billion [$4.9 billion].”
In addition to funding increases, Osborne explained the national cyber plan includes several steps for cyber defense: boost the capabilities of the National Cyber Crime Unit introduce stronger government system defenses, and attempt to block all bad IP addresses; establish a single National Cyber Center as a single point of contact for industry and the public, reporting to the GCHQ director; train and recruit additional cyber security personnel through programs like a $30.5 million competition for a new Institute of Coding; set up programs to support cyber start-up companies; establish two cyber innovation centers with one located in Cheltenham, England (the location of GCHQ); create a $252 million Defense and Cyber Innovation Fund to support cyber procurement; and clarifying the U.K. deterrence in cyberspace.
On the last point, Osborne noted that deterrence includes strong defenses, building global norms, and retaliation through offensive cyber means.
“We need to destroy the idea that there is impunity in cyberspace. We need those who would harm us to know that we will defend ourselves robustly. And that we have the means to do so. ” Osborne said.
The U.K. government is building an offensive cyber capability through investment in a National Offensive Cyber Program, which Osborne described as an ability to counter-attack in cyberspace.
The offensive cyber program is a partnership between the Ministry of Defense and GCHQ, “harnessing the skills and talents of both organizations to deliver the tools, techniques and tradecraft required for the U.K. to establish a world class capability,” Osborne said.
He highlighted the new cyber plan funding will help develop and advance the offensive program over the next five years.
“The threats to our country in cyber space come from a range of places…To all of them I have a clear message. We will defend ourselves. But we will also take the fight to you too,” Osborne said.
The chancellor also noted the government is committed to preparation for hybrid military conflicts including cyberspace. The Cameron government will use its commitment to spending 2 percent of GDP on defense to invest in a cyber trained military.
Further details of the armed forces component is set to be explained in the Security and Defense Strategic Review.