Organisations which provide critical national infrastructure services including electricity, water, energy, transport and healthcare could face fines of £17m or four percent of their global turnover if they fail to protect themselves from cyber attacks.
The plan is being considered by the UK government as it examines how to implement the European Union’s Network and Information Systems (NIS) Directive from May 2018. The directive represents the first piece of EU-wide legislation on cyber security and provides legal measures in an effort to protect member states and their essential services from cyber attacks.
