UK Government Reports Faster Vulnerability Fixes and Launches Cyber Profession

Summary
The UK government says its Vulnerability Monitoring Service scans about 6,000 public-sector organizations, cutting critical-vulnerability remediation from nearly 50 days to eight. It also launched a cyber career program to address workforce shortages.
Key points
- The government says the Vulnerability Monitoring Service scans approximately 6,000 public-sector organizations and detects around 1,000 types of vulnerabilities.
- Reported average remediation time for critical vulnerabilities fell from nearly 50 days to eight, while the backlog dropped by 75%.
- The service emphasizes DNS risks and provides remediation guidance.
- The new Government Cyber Profession includes a cyber academy, apprenticeships, and a structured career framework.
- Manchester is expected to become a hub for the initiative.
Article Details
- Event Type
- UK government cybersecurity initiative combining a Vulnerability Monitoring Service with a dedicated government Cyber Profession.
- Impact
- According to government data, the service scans approximately 6,000 public sector organizations and detects around 1,000 types of vulnerabilities. Average remediation time for critical vulnerabilities reportedly fell from nearly 50 days to eight, and the backlog of critical unresolved vulnerabilities fell by 75%. The article also describes a cyber academy, apprenticeships, and a career framework intended to strengthen the government cybersecurity workforce.
People
Ian MurrayDiscussed the effects of cyber incidents on public services and the reported improvements in vulnerability remediation, and announced the government Cyber Profession.Richard HorneAs CEO of the NCSC, discussed the importance of managing vulnerabilities in public services and said the government Cyber Profession would help attract and retain skilled professionals.
