Hi All
An interesting paper from the UK Home Office on a new ransomware policy:
Ransomware legislative proposals
Executive Summary
Overview
In the UK, ransomware is considered the greatest of all serious and organised cyber crime
threats and is deemed as a risk to the UKโs national security by the National Crime Agency
(NCA) and the National Cyber Security Centre (NCSC)1.
In January 2025, the Home Office launched a consultation on a package of proposals to
reduce the threat that ransomware poses to the UK economy. Alongside the consultation,
significant stakeholder engagement took place. The three proposals that were consulted
on are:
1. A targeted ban on ransomware payments for owners and operators of regulated-
critical national infrastructure and the public sector.
2. A ransomware payment prevention regime.
3. A mandatory incident reporting regime.
If progressed, this package of proposals would be the first specific measures in UK law to
counter ransomware.
Regards
Caute_cautim
