⚠️ UK cyber debate heats up: Should insecure software vendors be punished? YES 🏛️💥
At CYBERUK 2025, NCSC CTO Ollie Whitehouse argued vendors must face real costs for shipping insecure products, likening software to “food labelling” standards. Industry leaders from Vodafone, Mandiant, Sage, and Canada’s Cyber Centre countered that a functional market and customer choices already reward security investments.
🎯 NCSC’s view:
🛠️ Impose penalties for poor security to incentivize best practices
📜 Publish and ratify a Software Security Code of Practice
🎯 Industry’s view:
🤝 Trust customers to abandon sub-par vendors
🔍 Focus on clear guidance and robust procurement criteria
The core question remains: Will regulation or market forces deliver safer software? Market forces have failed us thus far.
#CyberSecurity #SoftwareSecurity #Governance #CYBERUK #NCSC #security #privacy #cloud #infosec
https://www.theregister.com/2025/05/12/uks_cyber_agency_and_industry/


