LGA Cyber, Digital and Technology Bulletin - 8

Having trouble viewing this email? View it as a webpage.

 

 

Cyber and digital banner

LGA Cyber, Digital and Technology Bulletin

April 2023 No.8


Twitter IconLinkedIn IconFacebook IconYoutube icon

Join us on Twitter: For the latest news and events, share your best practice, and join the conversation on cyber, digital and technology @LGAcyberdigital


Dear colleague

Welcome to the eighth edition of the LGA’s Cyber, Digital and Technology Bulletin.

This month the LGA will deliver our twentieth Cyber 360. The programme offers a great opportunity for councils to receive cyber related support from a dedicated team of peers and technical experts. The team will spend up to three days working with council staff helping them to explore their cyber security culture in a safe space. The team will then synthesise reflections and insights from these conversations to highlight existing strengths and make recommendations for possible areas of improvement. The programme is currently open for expressions of interest so please get in touch with us at cyberanddigital@local.gov.uk to find out more or drop into our next information session on 10 May.

In this month’s bulletin you can also read about our response to the Government’s recent consultation on draft legislation to support identity verification in partnership with both the Society for Innovation, Technology and Modernisation (Socitm) and Society of Local Authority Chief Executives and Senior Managers (Solace).

Away from our programme, as you may already be aware, on 31 March Capita reported a cyber incident. Last week, the company issued an updated statement confirming evidence that data was taken from its systems. This means there is an increased risk of customer data being exposed. Councils wishing to contact Capita should email Paul Abraham, Managing Director for Local Public Services, on paul.abraham@capita.com. Councils can also contact the Local Digital Cyber team at DLUHC via lgcyberincidents@levellingup.gov.uk.

Also away from our programme, the National Cyber Security Centre (NCSC) has recently refreshed its Board toolkit.  If you are a senior leader, we strongly recommend you review this guidance to ensure you are taking the necessary steps to maintain a strong cyber culture in your organisation, and that cyber security is integrated into your business continuity plans.

Finally, this month’s bulletin features an update on our work to understand how councils manage their cyber risk, specifically with a focus on cyber insurance coverage. We are undertaking a short survey of all councils to understand their level of coverage and its impact on overall cyber security expenditure.

If you have any questions, please do get in touch with us at cyberanddigital@local.gov.uk

Best wishes,

Owen Pritchard

Head of Cyber, Digital and Technology

Local Government Association

Owen Pritchard - Head of CDT Programme

Latest news and opportunities

LGA Cyber 360 Programme – take part in Cyber 360s

We’re pleased to announce that our Cyber 360 programme is supporting its twentieth council this month. We are calling for more councils to take part in our Cyber 360s – an empowering exercise that provides an opportunity to explore cyber security through a different lens. A multi-disciplinary team of peers and technical experts will provide in-depth, bespoke support to your council, helping you to build your capabilities, and develop a whole-council approach to cyber-security. We are also seeking officers to volunteer as part of the Cyber 360 teams. For more information, please contact cyberanddigital@local.gov.uk or pop into our online drop-in session on 10 May. Please fill out this short form to receive the link.

Cyber Insurance Survey

We are currently undertaking a short survey of all councils in England to enable us to understand the levels of cyber insurance coverage in the sector, the barriers that councils face in acquiring sufficient coverage, and the impact that cyber insurance coverage or lack of coverage has on councils’ overall cyber security expenditure. The survey findings will help us to build an evidence base for our work in supporting the sector. An invitation to take part in the survey was sent to Chief Finance Officers via email with a closing date for submissions of Friday 5 May. If you would like further information, or wish to request another copy of your council’s invitation email, please contact the team’s Senior Research Analyst mailto:helen.wilkinson@local.gov.uk.

Local Government Digitalisation Almanac

Our recently published Local Government Digitalisation Almanac was featured in a UKAuthority article. Cllr Neil Prior, Deputy Chair of the LGA’s Improvement and Innovation Board, explained how our Almanac “aims to make the topic of digitalisation – leveraging data and technology – more accessible and understandable to a range of users from all backgrounds, including officers and councillors with and without digital remits”.

LGA, Socitm and Solace submit consultation response on draft legislation to support identity verification

We submitted a joint response to draft legislation to support identity verification in partnership with Socitm and Solace informed through engagement with councils. The response recognises that data-sharing for identity verification can provide a benefit for individuals and households if implemented inclusively, but we have called for local government to be integrated into the process from the earliest possible point. You can read the full response on our webpage.

Launch of Digital Switchover toolkit

We are launching a toolkit to raise awareness among councils of the digital switchover. The toolkit contains assets to use on social media, some information that can be included on council websites and bulletins. This first version focuses on ‘telecare’ users – with other materials following, including a printable newsletter template, to support the distribution of information directly to residents who may be digitally excluded, or for display in libraries and community hubs. For readers not familiar with the switchover, all copper telephone lines in the UK are being replaced with full fibre which is scheduled for Local government has a critical role to play in preventing any negative impacts of the switchover on the residents who use lifeline devices such as personal alarms and health monitoring systems which are reliant on traditional plug-in telephones. Copies of the toolkit are available on our digital switchover hub. Any questions, please email socialcaredigital@local.gov.uk

LGA x PETRAS x SOCITM workshop at UCL

We were delighted to take part in a roundtable workshop on 28 March at Gordon House, University College London, in collaboration with Socitm and the PETRAS National Centre of Excellence. We shared with attendees our understanding of the challenges and opportunities facing local government in strengthening the cyber resilience of the sector, and our views on ways to facilitate learning exchanges between academics and councils to strengthen evidence-based programming.

LGA publishes a report on the role of councils in tackling digital exclusion

We commissioned DMS Research and Consulting to explore the links between various types of disadvantages and the availability and usage of digital infrastructure, and to consider the role of councils in tackling digital exclusion. The report highlights the emergence of a new digital divide, including a lack of access to full fibre and gigabit coverage as well as average download speeds dropping below 50 Mbps in the bottom 10 per cent of output areas. The report makes several recommendations for the government, LGA and for councils to tackle digital exclusion. Read the full report.

One Login Local Discovery Phase

The LGA, Socitm and Solace are facilitating a discovery phase with Government Digital Service on One Login. The objective is to build an understanding of how local services could be onboarded onto One Login from 2025, and to ensure the complexity of local service delivery is understood from the earliest stage. The first service focus area will be on blue badges, and the first session will take place on 31 May. If you’re interested in being involved in the discovery phase and/or join our sector One Login and Digital Identities working group, please email mceneaney@local.gov.uk.


National Cyber Security Centre (NCSC) updates

NCSC weekly threat reports

Recent highlights from NCSC’s weekly threat reports:

3CX Desktop App security issue

NCSC has issued advice on a recent security issue related to 3CX Desktop App. Affected versions are:

  • 12.407 and 18.12.416 for Windows platforms
  • 11.1213, 18.12.402, 18.12.407 and 18.12.416 for MacOS

This correlates to Update 7 for Windows, and Updates 6 and 7 for MacOS. The vendor 3CX has published a security alert which advises customers running affected versions to uninstall the software and use the browser-based web app (PWA) until a new version is available. Full instructions are provided. The NCSC strongly advises all organisations running this software to consult the vendor advisory and take the recommended actions in it.

NCSC refreshes its Board toolkit and encourages senior leaders to take pivotal role in boosting their organisation’s cyber resilience

The NCSC has launched new resources as part of its Cyber Security Board Toolkit, to help encourage senior leaders to have essential discussions about cyber security with their organisation’s technical experts and key stakeholders. With nearly all businesses relying on data and technology, the toolkit emphasises how board members should treat cyber risks with the same prominence as financial or legal risks, as cyber attacks can have severe impacts on an organisation’s ability to operate. The updated toolkit includes the benefits of cyber security, essential activities for the organisation and indicators of success.

Call for volunteers to stress test connected places cyber security principles

The NCSC is looking for willing local authorities to stress test Connected Places Cyber Security Principles in a live environment. Identifying what works well and how practices might be improved is fundamental to ensuring continued cyber security and resilience, and for this, the NCSC is seeking local authority support. If you would like to be involved or require further information, please email connectedplaces@ncsc.gov.uk

NCSC set to launch interactive video to raise awareness of cyber security in schools

On 3 May, the NCSC will launch CyberFlix – an interactive video aimed at 11 to14 year olds – to support secondary schools and youth groups to teach cyber security. CyberFlix highlights some of the most common cyber scams a pre-teen and teenage internet user may come across and is supported by practitioner-led resources to expand on the video’s themes.


Central Government updates

New white paper sets out UK approach to artificial intelligence

The Department for Science Innovation and Technology (DSIT) has launched an Artificial Intelligence white paperon the government’s proposals for implementing a proportionate, future-proof and pro-innovation framework for regulating AI. The white paper highlights both the cyber security threats and opportunities that AI creates. The framework, on which we are consulting until June, suggests that regulators consider the NCSC principles for securing machine learning models when assessing whether AI actors are adequately prioritising security. The LGA, Socitm and Solace are planning to develop a sector informed response to this consultation, and we will be hosting roundtables with councils in early June.

Supporting the development of transformative leaders within local government

In February and March, the Department for Levelling Up Housing and Communities (DLUHC) partnered with Amazon Web Services (AWS) and Socitm to deliver an online education programme for senior local government officers. They were joined by more than 150 individuals from over 75 local authorities across the country to distil lessons from years of digital transformation into a hands-on learning experience. A summary report has been published with the key insights shared by local government colleagues in the workshop.


Other events and opportunities

Innovate and Thrive: Saving £170 million with Agile Transformation – Wigan Council

Thursday 18 May, 9.00am – 2.00pm, The Edge Arena, Riveredge, Wigan, WN3 5AB

Wigan Council is hosting an event to discuss its agile digital transformation programme. In particular, the council will discuss how it has saved £170 million in the budget to date by reimagining public services and finding solutions to legacy systems to create a digitally inclusive community. For further information and registration, please visit the event page.

Local Public Services Innovation Summit

Wednesday 24 May 2023, 9am to 3pm, 10 St Bride Street, London, EC4A 4AD

techUK will bring together local authorities and the tech industry to discuss harnessing innovation and creating a catalyst for change for the sector. It will also be an opportunity to showcase good practice and facilitate greater collaboration between councils and industry. The event is free for public sector and techUK members. For further information and registration, please visit the techUK webpage.

Socitm and Microsoft Change Agent training programme

Socitm and Microsoft are delivering a training programme in partnership focusing on a range of technologies for delegates to gain a better understanding of the skills needed to support change. Those taking part in the Change Agent programme will have the opportunity to learn from industry experts and staff from other local authorities, helping build communities of practice to collaborate. This programme is free for many Microsoft Enterprise Agreement customers. For further information and registration please visit the Socitm webpage.


Contact details

Cyber, Digital and Technology Team: cyberanddigital@local.gov.uk


For more information visit our Cyber and Digital hub