Future of Cyber Compliance

Tender description

Awarded contract to a supplier to undertake a business review of the Cyber Compliance Regulatory and Organisational Requirements Lot 1: This work aims to examine and deliver a set of options that outline the core minimum capacity and capability needed to provide an effective regulator under NIS for Road, Rail and Maritime. Regulation of aviation under NIS is out of scope of this project. This work will need to: • articulate the duties the regulator will need to fulfill, noting not only the changes under the Cyber Security & Resilience (NIS) Bill, but the potential for changes to designation thresholds that may increase the number of regulated operators or bring future transport sub-sectors into scope. • examine how other cyber regulators operate and are adapting to legislative changes and consider the benefits of enforcement delivered through a range of delivery partners. This may include expanding the remit of other existing regulators to include cyber security as well as delivering some duties through commercial partners (such as audits).