{"id":1938,"date":"2018-12-05T15:47:00","date_gmt":"2018-12-05T15:47:00","guid":{"rendered":"https:\/\/digiterrebestg.wpengine.com\/?p=1938"},"modified":"2024-05-30T11:46:18","modified_gmt":"2024-05-30T11:46:18","slug":"security-fears-must-not-restrain-public-sector-digital-transformation","status":"publish","type":"post","link":"https:\/\/www.digiterre.com\/us\/2018\/12\/05\/security-fears-must-not-restrain-public-sector-digital-transformation\/","title":{"rendered":"Security fears must not restrain public sector digital transformation"},"content":{"rendered":"
\n
\n

Security fears must not restrain public sector digital transformation<\/h1>\n\n

The public sector should progress citizen engagement and online experiences in a visionary and transformative way, learning from major private sector platforms and pioneering wherever it can and wherever it\u2019s cost-effective to do so. Easier said than done, for sure. However fears over cybersecurity can restrain such large-scale transformation programmes and in turn, limit their potential benefits for whole of the UK.<\/p>\n \n <\/div>\n<\/section>\n\n\n

\n
\n

Deloitte\u2019s survey of digital transformation in government showed security concerns are one of the top 3 barriers impeding government organizations taking advantage of the digital opportunity, along with insufficient funding and too many competing priorities (Source: DU Press UK Digital Transformation Journey). There are a number of steps that can be taken to mitigate these fears:<\/p>\n\n\n\n

Establishing an effective risk management framework<\/h4>\n\n\n\n

Such risks include, but are not limited to, strategic, mar\u00adket, cyber, legal, reputational, political domains, as well as a broad range of operational risks such as information security, human capital and business continuity. Having a process in place is really critical to allow government departments to focus on digital transformation with the peace of mind that the majority of risks will be detected and handled promptly and in the right way. This will include everything from identifying the risks, assessing them, selecting the right risk responses and monitoring and reporting on risks<\/p>\n\n\n\n

Building in strong cybersecurity resilience<\/h4>\n\n\n\n

As dependency on digital technologies is higher than ever now, cyber-attacks are right up there not only as threats to public sector digital transformation but as a threat to the functioning of government and national security. But these new technologies can also help government and industry in identifying and addressing cyber risks and threats and, if designed and implemented correctly, can combat some of these threats as they arise. For example, in the online world, cloud-based approaches can enable instantaneous transmission of patches across a network. And artificial intelligence (AI) can automate detection of malware and mit\u00adigate risk at scale, automating routine decisions and fostering a focus on the highest priori\u00adties, such as open source vulnerabilities. However, at the other end of the technology spectrum, many public sector departments also continue to rely on archaic sys\u00adtems that retain vulnerabilities\u2014more fundamental modernization strategies, including shared services for secure computing platforms and new technology approaches ranging from identity and access management to encryption, can reduce risk significantly. So, accompanied by sound governance, government departments can adapt new technologies to support overstretched security staff who focus on results while still ensuring compliance. These experts can then address high-priority risk items even as constrained budgets remain the norm in the sector.<\/p>\n\n\n\n

Cementing digital leadership in the public sector<\/h4>\n\n\n\n

Developing digital leadership will enable public sector leaders to effectively weigh the risks of transitioning to digital government against the benefits, by drawing on the lessons from other government departments as well as the private sector. Such informed leaders are also more likely to be more steadfast in their support for a digital government program, even in the wake of collateral damage from the fallout of any digital failures or disruptions.<\/p>\n\n\n\n

Adopting a multi-expert, collaborative approach<\/h4>\n\n\n\n

Finally, acknowledging the public sector does not possess all the required security expertise and compliance know-how is critical. Last year\u2019s WannaCry ransomware attack, in which 45 NHS sites in the UK and over 100 countries were hit, shows that cybersecurity has never been more a more pressing issue for the public sector. Blackpool Council, for example, worked closely with the American firm Fortinet to become an early adopter of enterprise firewalls deployed at the heart of its infrastructure, making them resilient to such an attack. Their motivation was driven by the problems created by a previous attack, in 2009, called the Conficker computer worm (or virus). Without a broad, collaborative approach, bringing in expert cyber advice and support from the outside government, WannaCry could have been much more successful with its disrupting and subversive agenda.<\/p>\n\n\n\n

As with any risk, 100% prevention is never guaranteed. And it\u2019s a tough one because adversaries only have to succeed once to create massive damage. So the focus goes well beyond simply security, IT and systems to the people, processes, and data essential to carrying out public sector goals and objectives. Risk management is not simply a compliance exercise and should not be ring-fenced off somewhere in a remote part of government; for digital transformation to succeed, it should be at the heart of departmental, agency and local authority mission delivery<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

About the Author<\/h3>\n
\n \n \"\"
\n

Digiterre<\/h4>\n\n \n \n <\/div> \n <\/div>\n
\n Date: 05\/12\/18<\/strong><\/span>\n Category: Industry Insights<\/strong><\/span>\n <\/div>\n <\/div>\n<\/section>\n\n\n
\n
\n
\n \"\"<\/a>\n\n
\n \n

Digiterre Opens in D\u00fcsseldorf: Strengthening Our Presence in Germany\u2019s Energy Market<\/h4>\n <\/a>\n
\n

Date: 03\/06\/25<\/strong><\/p>\n

By: Laurence Pisani<\/strong><\/p>\n <\/div>\n <\/div>\n <\/article>\n\n

\n \"\"<\/a>\n\n
\n \n

Modernizing C++ in Tier 1 Banks: Balancing Performance and Progress<\/h4>\n <\/a>\n
\n

Date: 21\/05\/25<\/strong><\/p>\n

By: Digiterre<\/strong><\/p>\n <\/div>\n <\/div>\n <\/article>\n\n

\n \"\"<\/a>\n\n
\n \n

Legacy Threat: Cybersecurity Lessons from Retail Attacks\u00a0<\/h4>\n <\/a>\n
\n

Date: 07\/05\/25<\/strong><\/p>\n

By: Digiterre<\/strong><\/p>\n <\/div>\n <\/div>\n <\/article>\n\n

\n \"\"<\/a>\n\n
\n \n

Data Under Pressure: Rethinking Data Management in a Volatile, Tariff-Driven Market\u00a0<\/h4>\n <\/a>\n
\n

Date: 30\/04\/25<\/strong><\/p>\n

By: Laurence Pisani<\/strong><\/p>\n <\/div>\n <\/div>\n <\/article>\n\n \n <\/div>\n

\n

Follow Us<\/h3>\n

Get the latest news and stay up to date<\/p>\n